Description
A vulnerability was found in Xinhu RockOA 2.6.3 and classified as problematic. Affected by this issue is the function okla of the file /webmain/public/upload/tpl_upload.html. The manipulation of the argument callback leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-271994 is the identifier assigned to this vulnerability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Xinhu | RockOA | 2.6.3 | — |
References
- VDB-271994 | Xinhu RockOA tpl_upload.html okla cross site scripting vdb-entry technical-description
- VDB-271994 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #372744 | rainrocka xinhu v2.6.3 Cross Site Scripting third-party-advisory
- https://github.com/rainrocka/xinhu/issues/7 exploit issue-tracking