Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-9457

Multiple XSS vulnerabilities in OpenNMS webapp

          Details

          • Sprint:
            Horizon - September 27th

            Description

            For details, see https://mynms.opennms.com/Ticket/Display.html?id=4297
            The XSS problems are straightforward to address case-by-case. The CSRF ones will require a full audit of the webapp to address comprehensively.

              Attachments

                Issue Links

                depends on

                Bug - A problem which impairs or prevents the functions of the product. NMS-9354 XSS vulnerability on node error page

                • Major - Major loss of function.
                • Resolved
                is duplicated by

                Bug - A problem which impairs or prevents the functions of the product. NMS-9675 IOActive: Reflected Cross-site Scripting in alarm/list.htm display Parameter

                • Major - Major loss of function.
                • Resolved

                  Activity

                    People

                    • Assignee:
                      seth Seth Leger
                      Reporter:
                      jeffg Jeff Gehlbach
                    • Votes:
                      0 Vote for this issue
                      Watchers:
                      4 Start watching this issue

                      Dates

                      • Created:
                        Updated:
                        Resolved: