Unscored CVE-2012-4938 EUVD-2012-4863GHSA-785q-6cv4-2vm9

Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject a…

Published Nov 18, 2012 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in the web interface in Pattern Insight 2.3 allows remote authenticated administrators to inject arbitrary web script or HTML via the banner message.

References

VU#802596 third-party-advisory
pattern-insight-banner-message-xss(79786) vdb-entry
56381 vdb-entry
51203 third-party-advisory