Security Advisory

CVE-2017-18635

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-09-25 22:59:16

Last updated 2024-08-05 21:28:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

← Browse all CVEs View on cve.org ↗