Security Advisory

CVE-2017-8763

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-05-04 03:55:00
Last updated 2024-08-05 16:48:22
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter.