Riskcovery

CVE-2023-40311

Stored XSS in multiple JSP files in opennms/opennms

State
Published
Severity
6.7 Medium
Published
Aug 14, 2023
Updated
Sep 27, 2024
Reserved
Aug 14, 2023

Read the record on cve.org

Description

Multiple stored XSS were found on different JSP files with unsanitized parameters in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms that allow an attacker to store on database and then load on JSPs or Angular templates. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Jordi Miralles Comins for reporting this issue.

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:NOpenNMS

Weaknesses

  • CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected Products

ProductVersions
HorizonThe OpenNMS Group
  • 31.0.8 to before 32.0.2Affected
  • before 31.0.8Unknown
MeridianThe OpenNMS Group
  • 2020.0.0 through 2020.1.37Affected
  • 2021.0.0 through 2021.1.29Affected
  • 2022.0.0 through 2022.1.18Affected
  • 2023.0.0 through 2023.1.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.