Actions
Bug #7999
closedXSS via 'hostname' parameter in diag_dns.php
Start date:
10/24/2017
Due date:
% Done:
100%
Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
All
Affected Architecture:
All
Description
On diag_dns.php the 'hostname' parameter is sent back to the user without encoding in a JavaScript block, leading to an XSS
Affects 2.3.x and 2.4.x
To test, enter this for the hostname:
0.0.0.0";alert("diag_dns XSS")//
Updated by Jim Pingle almost 7 years ago
- Status changed from Confirmed to Feedback
- % Done changed from 0 to 100
Applied in changeset 43746e1b4ef6fec0e9c915495aa3926a6b97e7a3.
Actions