CVE-2020-15951

Name of the Vulnerable Software and Affected Versions Immuta version 2.8.2

Description The issue allows attackers to inject arbitrary HTML content into the application by supplying malicious project names. This could be used to redirect users to a phishing website in an attempt to steal credentials.

Recommendations For Immuta version 2.8.2, update to a version that properly sanitizes user-supplied input to prevent HTML injection attacks. As a temporary workaround, consider restricting user input for project names to minimize the risk of exploitation.