Published: 07/08/2017 Updated: 18/02/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote malicious users to inject arbitrary web script or HTML.

Vulnerable Product	Search on Vulmon	Subscribe to Product
redhat ovirt-engine -

Cross-site scripting (XSS) vulnerability in ovirt-engine allows remote attackers to inject arbitrary web script or HTML ...

A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat). In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session. JS code has been kept simple due to the rush.

CVE-2016-3113 (PoC) A proof of concept to exploit the reflected XSS vulnerability in the oVirt web interface (RedHat) In this PoC a VM in the oVirt IaaS environment is to be started via the victim's browser session JS code has been kept simple due to the rush More Info here: wwwitskritisde/_uploads/jk17/Students___Freigabeversion/DURMAZ___Praesentationpdf (sl

CWE-79 https://bugzilla.redhat.com/show_bug.cgi?id=1326598 https://nvd.nist.gov https://github.com/0xEmanuel/CVE-2016-3113 https://access.redhat.com/security/cve/cve-2016-3113

CVE-2016-3113

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect