CVE-2018-9036 CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
MediumCVSS 4.8
EPSS 0.51%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CheckSec Canopy 3.x before 3.0.7 has stored XSS via the Login Page Disclaimer, allowing attacks by low-privileged users against higher-privileged users.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| checksec canopy | >= 3.0.0, <= 3.0.6 | No fix listed |
References
- 20180619 XSS in Canopy login page mailing-list third-party-advisory