Description
Cross-site scripting (XSS) vulnerability in surveillanceView.htm in OpenNMS 1.5.94 allows remote attackers to inject arbitrary web script or HTML via the viewName parameter.
References
- http://bugzilla.opennms.org/show_bug.cgi?id=2760
- http://www.opennms.org/documentation/ReleaseNotesUnStable.html
- opennms-viewname-xss(45616) vdb-entry
- 31539 vdb-entry
- 32101 third-party-advisory