CVE-2015-1368

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or…

published January 27, 2015

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) order_by parameter to credentials/, (2) inventories/, (3) projects/, or (4) users/3/permissions/ in api/v1/ or the (5) next_run parameter to api/v1/schedules/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05153 · 92.4th percentile
Published
2015-01-27T17:00Z
EPSS history
Timeline
  • 27 JAN 17:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Ansible Tower (aka Ansible UI) before 2.0.5 allow remote attackers to inject arbitrary web script or…
    cvelistv5