Unscored CVE-2009-5099 EUVD-2009-5054GHSA-jh75-h74m-97h7

Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitr…

Published Sep 13, 2011 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in ViewAction in Pentaho BI Server 1.7.0.1062 and earlier allows remote attackers to inject arbitrary web script or HTML via the outputType parameter.

References

37024 third-party-advisory
http://jira.pentaho.com/browse/BISERVER-2698?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
http://antisnatchor.com/2009/06/20/pentaho-1701062-multiple-vulnerabilities/
20091013 [AntiSnatchOr] Pentaho Bi-server multiple vulnerabilities mailing-list
ADV-2009-2972 vdb-entry