Security Advisory

CVE-2020-24669

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-01-29 18:46:36

Last updated 2024-08-04 15:19:09

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report Description' field in 'About this Report' section. Remediated in >= 8.3.0.9, >= 9.0.0.1, and >= 9.1.0.0 GA.

← Browse all CVEs View on cve.org ↗