CVE-2016-4847

CVE-2016-4847

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in site/search.php in OSSEC Web UI before 0.9 allows remote attackers to inject arbitrary web script or HTML by leveraging an unanchored regex.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000141.html http://jvn.jp/en/jp/JVN58455472/index.html https://github.com/ossec/ossec-wui/commit/b4dcbba7a8eb09ba9d38fc69807a8861255736d0 http://www.securityfocus.com/bid/92536