PRTG Network Monitor version 17.3.33.2830 is vulnerable to stored Cross-Site Scripting on all sensor titles, related to incorrect error handling for a %00 in the SRC attribute of an IMG element.
References
Link | Resource |
---|---|
https://medium.com/stolabs/security-issue-on-prtg-network-manager-ada65b45d37b | Exploit Technical Description Third Party Advisory |
Configurations
Information
Published : 2017-10-03 18:29
Updated : 2017-10-12 08:45
NVD link : CVE-2017-15008
Mitre link : CVE-2017-15008
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
paessler
- prtg_network_monitor