Lucene search
GoogleOSV:GHSA-9HHC-CC6C-99HHHistoryMay 24, 2022 - 7:03 p.m.
OpenNMS Horizon vulnerable to XSS
2022-05-2419:03:10
Google
osv.dev
8
opennms
horizon
meridian
xss
vulnerability
stored
cross-site scripting
validation
software
In OpenNMS Horizon, versions opennms-18.0.0-1 through opennms-27.1.0-1; OpenNMS Meridian, versions meridian-foundation-2015.1.0-1 through meridian-foundation-2019.1.18-1; meridian-foundation-2020.1.0-1 through meridian-foundation-2020.1.7-1 are vulnerable to Stored Cross-Site Scripting, since the function createRequisitionedNode() does not perform any validation checks on the input sent to the node-label parameter. Due to this flaw an attacker could inject an arbitrary script which will be stored in the database.
Related
nvd
nvd
CVE-2021-25934
2021-05-25 19:15:07
osv
osv
CVE-2021-25934
2021-05-25 19:15:07
prion
prion
Cross site scripting
2021-05-25 19:15:00
cvelist
cvelist
CVE-2021-25934
2021-05-25 18:42:29
github
github
OpenNMS Horizon vulnerable to XSS
2022-05-24 19:03:10
cve
cve
CVE-2021-25934
2021-05-25 19:15:07