~ / search / GHSA-79jr-8fhm-8wv3

GHSA-79jr-8fhm-8wv3

OpenNMS Horizon and Meridian vulnerable to Cross-site Scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-0846

Packages

EcosystemPackageAffectedFixed in
Maven org.opennms:opennms < 31.0.3 31.0.3

Details

As written in the advisory (Markdown source, shown as plain text).

Unauthenticated, stored cross-site scripting in the display of alarm reduction keys in multiple versions of OpenNMS Horizon and Meridian could allow an attacker access to confidential session information.

References

External links from the advisory. They lead to third-party sites.