CVE-2020-24670

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter. Remediated in >= 7.1.0.25, >= 8.2.0.6, and >= 8.3.0.0 GA.
References
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*
cpe:2.3:a:hitachi:vantara_pentaho:*:*:*:*:*:*:*:*

Information

Published : 2021-01-29 11:15

Updated : 2021-02-04 08:12


NVD link : CVE-2020-24670

Mitre link : CVE-2020-24670


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

hitachi

  • vantara_pentaho