Beveiligingsadvies

CVE-2019-19336

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-03-19 13:11:16

Laatst bijgewerkt 2024-08-05 02:16:47

Toegewezen door redhat

CVSS-score 5.4

Status PUBLISHED

Beschrijving

A cross-site scripting vulnerability was reported in the oVirt-engine's OAuth authorization endpoint before version 4.3.8. URL parameters were included in the HTML response without escaping. This flaw would allow an attacker to craft malicious HTML pages that can run scripts in the context of the user's oVirt session.

← Alle CVE's bekijken Bekijk op cve.org ↗