Lucene search
GoogleOSV:CVE-2021-25934HistoryMay 25, 2021 - 7:15 p.m.
CVE-2021-25934
2021-05-2519:15:07
Google
osv.dev
3
opennms
meridian
cross-site scripting
vulnerability
createrequisitionednode
database
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the function createRequisitionedNode() does not perform any validation checks on the input sent to the node-label parameter. Due to this flaw an attacker could inject an arbitrary script which will be stored in the database.
Related
osv
osv
OpenNMS Horizon vulnerable to XSS
2022-05-24 19:03:10
nvd
nvd
CVE-2021-25934
2021-05-25 19:15:07
prion
prion
Cross site scripting
2021-05-25 19:15:00
cvelist
cvelist
CVE-2021-25934
2021-05-25 18:42:29
github
github
OpenNMS Horizon vulnerable to XSS
2022-05-24 19:03:10
cve
cve
CVE-2021-25934
2021-05-25 19:15:07