Unscored CVE-2018-1000163 EUVD-2018-1866GHSA-rfx8-7jqh-g9mf

Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript inj…

Published Apr 18, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console.

References

https://xiaofen9.github.io/blog/floodlight-rce/