ISOMAN

CVE

CVE-2017-1000065

Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser.

Severity
MEDIUM
CVSS
6.1
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
OpenMediaVault2.1 i386unknownsource
OpenMediaVault2.1 amd64unknownsource

References

  1. https://github.com/openmediavault/openmediavault/commit/b2db1e24d0e52b961b5c3b3329b6ee717cac53a2
  2. https://github.com/openmediavault/openmediavault/commit/b2db1e24d0e52b961b5c3b3329b6ee717cac53a2