LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://github.com/HewlettPackard/LinuxKI/releases/tag/v6.0-2 | third party advisory |