GHSA-x9q4-5f3c-cw62MediumCVSS 6.1

MunkiReport munki_facts module Cross-Site Scripting (XSS) vulnerability

Published
May 24, 2022
Last Modified
April 24, 2024

🔗 CVE IDs covered (1)

CVE-2020-15881 →

📋 Description

A Cross-Site Scripting (XSS) vulnerability in the munki_facts (aka Munki Conditions) module before 1.5 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the key name.

🎯 Affected products1

  • composer/munkireport/munki_facts:< 1.5

🔗 References (6)