Cross-site scripting (XSS) vulnerability in the charts module in Greenbone Security Assistant (GSA) 6.x before 6.0.8 allows remote attackers to inject arbitrary web script or HTML via the aggregatetype parameter in a getaggregate command to omp.
{
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:fedoraproject:fedora:22:*:*:*:*:*:*:*",
"cpe:2.3:o:fedoraproject:fedora:23:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "22"
},
{
"last_affected": "22"
},
{
"introduced": "23"
},
{
"last_affected": "23"
}
],
"vendor_product": "fedoraproject:fedora",
"source": "CPE_STRING"
},
{
"cpes": [
"cpe:2.3:o:greenbone:greenbone_os:3.1.10:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.11:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.12:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.13:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.14:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.15:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.16:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.17:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.18:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.19:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.1:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.20:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.21:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.22:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.23:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.6:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.7:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.8:*:*:*:*:*:*:*",
"cpe:2.3:o:greenbone:greenbone_os:3.1.9:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "3.1.1"
},
{
"last_affected": "3.1.1"
},
{
"introduced": "3.1.6"
},
{
"last_affected": "3.1.6"
},
{
"introduced": "3.1.7"
},
{
"last_affected": "3.1.7"
},
{
"introduced": "3.1.8"
},
{
"last_affected": "3.1.8"
},
{
"introduced": "3.1.9"
},
{
"last_affected": "3.1.9"
},
{
"introduced": "3.1.10"
},
{
"last_affected": "3.1.10"
},
{
"introduced": "3.1.11"
},
{
"last_affected": "3.1.11"
},
{
"introduced": "3.1.12"
},
{
"last_affected": "3.1.12"
},
{
"introduced": "3.1.13"
},
{
"last_affected": "3.1.13"
},
{
"introduced": "3.1.14"
},
{
"last_affected": "3.1.14"
},
{
"introduced": "3.1.15"
},
{
"last_affected": "3.1.15"
},
{
"introduced": "3.1.16"
},
{
"last_affected": "3.1.16"
},
{
"introduced": "3.1.17"
},
{
"last_affected": "3.1.17"
},
{
"introduced": "3.1.18"
},
{
"last_affected": "3.1.18"
},
{
"introduced": "3.1.19"
},
{
"last_affected": "3.1.19"
},
{
"introduced": "3.1.20"
},
{
"last_affected": "3.1.20"
},
{
"introduced": "3.1.21"
},
{
"last_affected": "3.1.21"
},
{
"introduced": "3.1.22"
},
{
"last_affected": "3.1.22"
},
{
"introduced": "3.1.23"
},
{
"last_affected": "3.1.23"
}
],
"vendor_product": "greenbone:greenbone_os",
"source": "CPE_STRING"
}
]
}{
"cpe": [
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:greenbone:greenbone_security_assistant:6.0.7:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "6.0.0"
},
{
"last_affected": "6.0.0"
},
{
"introduced": "6.0.1"
},
{
"last_affected": "6.0.1"
},
{
"introduced": "6.0.2"
},
{
"last_affected": "6.0.2"
},
{
"introduced": "6.0.3"
},
{
"last_affected": "6.0.3"
},
{
"introduced": "6.0.4"
},
{
"last_affected": "6.0.4"
},
{
"introduced": "6.0.5"
},
{
"last_affected": "6.0.5"
},
{
"introduced": "6.0.6"
},
{
"last_affected": "6.0.6"
},
{
"introduced": "6.0.7"
},
{
"last_affected": "6.0.7"
}
],
"source": "CPE_STRING"
}