Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-9457

Multiple XSS vulnerabilities in OpenNMS webapp

    XMLWordPrintable

    Details

    • Sprint:
      Horizon - September 27th

      Description

      For details, see https://mynms.opennms.com/Ticket/Display.html?id=4297
      The XSS problems are straightforward to address case-by-case. The CSRF ones will require a full audit of the webapp to address comprehensively.

        Attachments

          Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. NMS-9354 XSS vulnerability on node error page

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. NMS-9675 IOActive: Reflected Cross-site Scripting in alarm/list.htm display Parameter

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                seth Seth Leger
                Reporter:
                jeffg Jeff Gehlbach
              • Votes:
                0 Vote for this issue
                Watchers:
                4 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: