Cross-site Scripting (XSS)

2020-02-1400:29:59

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

34.0%

JSON

ovirt-engine is vulnerable to cross-site scripting (XSS). The vulnerability exists through the lack of sanitization of the response_type parameter.

CPENameOperatorVersion
ovirt-imageio-proxyeq1.5.2__0.el7ev
ovirt-imageio-proxyeq0.4.0__0.el7ev
ovirt-imageio-proxyeq1.4.4__0.el7ev
ovirt-imageio-proxyeq1.4.5__0.el7ev
ovirt-imageio-proxyeq1.3.1.2__0.el7ev
ovirt-imageio-proxyeq0.3.0__0.el7ev
ovirt-imageio-proxyeq1.4.2__0.el7ev
ovirt-imageio-proxyeq1.0.0__0.el7ev
ovirt-imageio-proxyeq1.5.1__0.el7ev
ovirt-imageio-commoneq1.5.2__0.el7ev

Name	Operator	Version
ovirt-imageio-proxy	eq	1.5.2__0.el7ev
ovirt-imageio-proxy	eq	0.4.0__0.el7ev
ovirt-imageio-proxy	eq	1.4.4__0.el7ev
ovirt-imageio-proxy	eq	1.4.5__0.el7ev
ovirt-imageio-proxy	eq	1.3.1.2__0.el7ev
ovirt-imageio-proxy	eq	0.3.0__0.el7ev
ovirt-imageio-proxy	eq	1.4.2__0.el7ev
ovirt-imageio-proxy	eq	1.0.0__0.el7ev
ovirt-imageio-proxy	eq	1.5.1__0.el7ev
ovirt-imageio-common	eq	1.5.2__0.el7ev