Security Advisory

CVE-2018-1000611

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2018-07-09 20:00:00

Last updated 2024-09-16 19:25:02

Assigner mitre

State PUBLISHED

Description

SURFnet OpenConext EngineBlock version 5.7.0 to 5.7.3 contains a Cross Site Scripting (XSS) vulnerability that can result in Allows an attacker to inject arbitrary web scripts or HTML into help and login pages. This attack appear to be exploitable via the victim opening a specially crafted URL.

← Browse all CVEs View on cve.org ↗