FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Prior to version 1.5.10.15, due to a lack of request sanitization in the logs, a malicious request containing XSS would be stored in a log file. When an administrator of the FOG server logged in and viewed the logs, they would be parsed as HTML and displayed accordingly. Version 1.5.10.15 contains a patch. As a workaround, view logs from an external text editor rather than the dashboard.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published: 2023-10-31T14:25:12.617Z
Updated: 2024-09-05T17:47:51.243Z
Reserved: 2023-10-19T20:34:00.946Z
Link: CVE-2023-46235
Vulnrichment
Updated: 2024-08-02T20:37:40.186Z
NVD
Status : Modified
Published: 2023-10-31T15:15:09.547
Modified: 2024-11-21T08:28:08.143
Link: CVE-2023-46235
Redhat
No data.