Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregate_type parameter in a get_aggregate command to omp.
References
| Link | Resource |
|---|---|
| http://lists.fedoraproject.org/pipermail/package-announce/2016-May/183371.html | Third Party Advisory |
| http://lists.fedoraproject.org/pipermail/package-announce/2016-May/184478.html | Third Party Advisory |
| http://packetstormsecurity.com/files/135328/OpenVAS-Greenbone-Security-Assistant-Cross-Site-Scripting.html | Third Party Advisory |
| http://www.greenbone.net/technology/gbsa2016-01.html | Broken Link Vendor Advisory |
| http://www.openvas.org/OVSA20160113.html | Third Party Advisory |
| http://www.securityfocus.com/archive/1/537335/100/0/threaded | |
| https://en.internetwache.org/cve-2016-1926-xss-in-the-greenbone-security-assistant-20-01-2016/ | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
No history.
Information
Published : 2016-01-26 19:59
Updated : 2023-12-10 11:46
NVD link : CVE-2016-1926
Mitre link : CVE-2016-1926
CVE.ORG link : CVE-2016-1926
JSON object : View
Products Affected
greenbone
- greenbone_security_assistant
- greenbone_os
fedoraproject
- fedora
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')