Cross-site scripting (XSS) vulnerability in app/views/events/_menu.html.erb in Snorby 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the title (cls.name variable) when creating a classification.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-07-08T16:00:00
Updated: 2024-08-06T06:50:02.574Z
Reserved: 2015-07-08T00:00:00
Link: CVE-2015-5460
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-07-08T16:59:03.270
Modified: 2019-06-25T15:21:40.100
Link: CVE-2015-5460
Redhat
No data.