Beveiligingsadvies
CVE-2019-25502
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value parameter in the jobs endpoint. Attackers can craft requests with SVG payload injection to execute arbitrary JavaScript in victim browsers and steal session cookies or perform unauthorized actions.