Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-14337

Persistent xss in map navigation tree widget

    XMLWordPrintable

    Details

    • Team:
      Team C
    • Sprint:
      Sprint 28, Sprint 29, Sprint 30, Sprint 31
    • Story Points:
      0.125

      Description

      There is a persistent xss in map navigation tree widget. To reproduce it, create a map navigation tree widget, add single element and set it's name to <img src="xxx" onerror="alert('xss');"/>. As a result you will get:

        Attachments

        1. xss.png
          20 kB
          Vjaceslavs Bogdanovs

          Activity

            People

            Assignee:
            vjaceslavs Vjaceslavs Bogdanovs
            Reporter:
            vjaceslavs Vjaceslavs Bogdanovs
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: