Skip to content
OpenAdvisories
Unscored CVE-2015-6502 EUVD-2015-6442GHSA-j8vq-j5q7-39m3

Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary we…

Published Dec 11, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string parameter, related to Login Redirect.

References