CVE-2020-15883

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-15883
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15883.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-15883
Aliases
Published
2020-07-23T14:15:12.337Z
Modified
2026-07-08T12:05:10.070111Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

A Cross-Site Scripting (XSS) vulnerability in the managedinstalls module before 2.6 for MunkiReport allows remote attackers to inject arbitrary web script or HTML via the last two URL parameters (through which installed packages names and versions are reported).

References

Affected packages

Git / github.com/munkireport/managedinstalls

Affected ranges

Type
GIT
Repo
https://github.com/munkireport/managedinstalls
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
708f6a2abc4b80a3751bcc9cf896f80d84250c55
Database specific 
{
    "cpe": "cpe:2.3:a:managedinstalls_project:managedinstalls:*:*:*:*:*:munkireport:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "2.6"
        }
    ]
}

Affected versions

V2.*
V2.3
v1.*
v1.1
v1.2
v2.*
v2.0
v2.1
v2.2
v2.4
v2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15883.json"

Git / github.com/munkireport/munkireport-php

Affected ranges

Type
GIT
Repo
https://github.com/munkireport/munkireport-php
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
dc7cb866e74670aea83e16c63e8b68919ac69928
Database specific 
{
    "source": "REFERENCES"
}

Affected versions

0.*
0.9.0
2.*
2.0.0.336
2.0.1.353
2.0.4
v2.*
v2.0.2.369
v2.0.3
v2.14.0
v3.*
v3.0.0
v3.0.1
v3.0.2
v3.1.0
v3.1.1
v3.2.0
v3.2.1
v3.2.2
v3.2.3
v3.2.4
v3.3.0
v3.3.1
v4.*
v4.0.0
v4.0.1
v4.0.2
v4.1.0
v4.1.1
v4.1.3
v4.2.0
v4.2.2
v4.3.0RC2
v4.3.1
v4.3.2
v4.3.3
v4.3.4
v5.*
v5.1.0
v5.1.1
v5.1.2
v5.1.3
v5.1.4
v5.1.5
v5.2.0
v5.3.1
v5.3.3
v5.3.4
v5.3.5
v5.4.0
v5.4.1
v5.5.0
Other
wip-20180701

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-15883.json"