Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-9457

Multiple XSS vulnerabilities in OpenNMS webapp

    XMLWordPrintable

    Details

    • Sprint:
      Horizon - September 27th

      Description

      For details, see https://mynms.opennms.com/Ticket/Display.html?id=4297
      The XSS problems are straightforward to address case-by-case. The CSRF ones will require a full audit of the webapp to address comprehensively.

        Attachments

          Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. NMS-9354 XSS vulnerability on node error page

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. NMS-9675 IOActive: Reflected Cross-site Scripting in alarm/list.htm display Parameter

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              Assignee:
              seth Seth Leger (Inactive)
              Reporter:
              jeffg Jeff Gehlbach
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: