Security Advisory

CVE-2022-35630

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-07-29 17:00:33
Last updated 2024-09-17 02:20:37
Assigner rapid7
State PUBLISHED

Description

A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2.