CVE-2020-15883

A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or…

published July 23, 2020

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (through which installed packages names and versions are reported).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01161 · 66.9th percentile
Published
2020-07-23T13:42Z
EPSS history
Timeline
  • 23 JUL 13:42Z
    A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or…
    cvelistv5