Skip to content
OpenAdvisories
Unscored CVE-2018-19089 EUVD-2018-10804GHSA-r238-9672-36w7

tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tia…

Published Nov 7, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in tianti-module-admin\src\main\webapp\WEB-INF\views\user\user_list.jsp.

References