CVE-2018-1000557: XSS
OCS Inventory OCS Inventory NG version ocsreports 2.4 contains a Cross Site Scripting (XSS) vulnerability in login form and search functionality that can result in An attacker is able to execute arbitrary (javascript) code within a victims' browser. This attack appear to be exploitable via Victim must open a crafted link to the application. This vulnerability appears to have been fixed in ocsreports 2.4.1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1000557?
CVE-2018-1000557 is considered a moderate severity vulnerability due to its potential for exploitation through Cross Site Scripting (XSS).
How do I fix CVE-2018-1000557?
To fix CVE-2018-1000557, upgrade OCS Inventory NG to the latest version that addresses this XSS vulnerability.
What type of vulnerability is CVE-2018-1000557?
CVE-2018-1000557 is a Cross Site Scripting (XSS) vulnerability affecting the login form and search functionality of OCS Inventory NG.
Which versions of OCS Inventory NG are affected by CVE-2018-1000557?
The vulnerability CVE-2018-1000557 specifically affects OCS Inventory NG version 2.4.
Can CVE-2018-1000557 be exploited remotely?
Yes, CVE-2018-1000557 can be exploited remotely by an attacker to execute arbitrary JavaScript code in a victim's browser.