Vendor
Jet Admin
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 7.3
Jet Admin Stored XSS
Jet Admin allows an authenticated attacker to inject JavaScript via the sign-in page's scripts and styles option. Injected script is executed in the context of any visiting user's domain.
-
High 8.6
Jet Admin tenant isolation failure
Jet Admin allows an attacker to create a malicious app and connect it to a target user's custom domain, edit the authentication configuration, and reroute traffic to the attacker-controlled app. Once connected to the target domain, the attacker's workspace is…