Uploaded image for project: 'OpenNMS'
  1. OpenNMS
  2. NMS-9457

Multiple XSS vulnerabilities in OpenNMS webapp

    XMLWordPrintable

Details

    • Horizon - September 27th

    Description

      For details, see https://mynms.opennms.com/Ticket/Display.html?id=4297
      The XSS problems are straightforward to address case-by-case. The CSRF ones will require a full audit of the webapp to address comprehensively.

      Attachments

        Issue Links

          depends on

          Bug - A problem which impairs or prevents the functions of the product. NMS-9354 XSS vulnerability on node error page

          • Major - Major loss of function.
          • Resolved
          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. NMS-9675 IOActive: Reflected Cross-site Scripting in alarm/list.htm display Parameter

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              seth Seth Leger
              jeffg Jeff Gehlbach
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: