Multiple cross-site scripting (XSS) vulnerabilities in Quali CloudShell before 8 allow remote authenticated users to inject arbitrary web script or HTML via the (1) Name or (2) Description parameter to RM/Reservation/ReserveNew; the (3) Description parameter to RM/Topology/Update; the (4) Name, (5) Description, (6) ExecutionBatches[0].Name, (7) ExecutionBatches[0].Description, or (8) Labels parameter to SnQ/JobTemplate/Edit; or (9) Alias or (10) Description parameter to RM/AbstractTemplate/AddOrUpdateAbstractTemplate.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2017-08-18T16:00:00
Updated: 2024-08-05T17:18:02.194Z
Reserved: 2017-06-21T00:00:00
Link: CVE-2017-9767
Vulnrichment
No data.
NVD
Status : Modified
Published: 2017-08-18T16:29:00.467
Modified: 2024-11-21T03:36:48.160
Link: CVE-2017-9767
Redhat
No data.