A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability.
References
| Link | Resource |
|---|---|
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/commit/f462285a0a2d7e1a9255b0820240b94a43b00a44 | Patch |
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/pull/130 | Patch |
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/releases/tag/1.3.5 | Release Notes |
| https://vuldb.com/?ctiid.217153 | Third Party Advisory |
| https://vuldb.com/?id.217153 | Third Party Advisory |
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/commit/f462285a0a2d7e1a9255b0820240b94a43b00a44 | Patch |
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/pull/130 | Patch |
| https://github.com/zenoss/ZenPacks.zenoss.Dashboard/releases/tag/1.3.5 | Release Notes |
| https://vuldb.com/?ctiid.217153 | Third Party Advisory |
| https://vuldb.com/?id.217153 | Third Party Advisory |
Configurations
History
21 Nov 2024, 04:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/zenoss/ZenPacks.zenoss.Dashboard/commit/f462285a0a2d7e1a9255b0820240b94a43b00a44 - Patch | |
| References | () https://github.com/zenoss/ZenPacks.zenoss.Dashboard/pull/130 - Patch | |
| References | () https://github.com/zenoss/ZenPacks.zenoss.Dashboard/releases/tag/1.3.5 - Release Notes | |
| References | () https://vuldb.com/?ctiid.217153 - Third Party Advisory | |
| References | () https://vuldb.com/?id.217153 - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 4.0
v3 : 3.5 |
29 Feb 2024, 01:23
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 |
15 Nov 2023, 03:25
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
07 Nov 2023, 02:56
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 |
20 Oct 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | A vulnerability classified as problematic was found in Zenoss Dashboard up to 1.3.4. Affected by this vulnerability is an unknown functionality of the file ZenPacks/zenoss/Dashboard/browser/resources/js/defaultportlets.js. The manipulation of the argument HTMLString leads to cross site scripting. The attack can be launched remotely. Upgrading to version 1.3.5 is able to address this issue. The identifier of the patch is f462285a0a2d7e1a9255b0820240b94a43b00a44. It is recommended to upgrade the affected component. The identifier VDB-217153 was assigned to this vulnerability. | |
| CWE |
Information
Published : 2023-01-01 09:15
Updated : 2024-11-21 04:03
NVD link : CVE-2018-25063
Mitre link : CVE-2018-25063
CVE.ORG link : CVE-2018-25063
JSON object : View
Products Affected
zenoss
- dashboard
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')