Medium · 6.5 CVE-2019-3686 EUVD-2019-13321GHSA-cf2f-f2vm-48vp

XSS in distri and version parameter in openQA

Published Jan 17, 2020 · Updated Sep 17, 2024 · Assigned by suse

Description

openQA before commit c172e8883d8f32fced5e02f9b6faaacc913df27b was vulnerable to XSS in the distri and version parameter. This was reported through the bug bounty program of Offensive Security

Affected products

Vendor	Product	Affected	Fixed
SUSE	openQA	unspecified – < c172e8883d8f32fced5e02f9b6faaacc913df27b	c172e8883d8f32fced5e02f9b6faaacc913df27b

References

https://bugzilla.suse.com/show_bug.cgi?id=1142849