Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XSS Vulnerability in Puppet Enterprise Console
Vulnerability Description
A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Puppet Enterprise Console 跨站脚本漏洞
Vulnerability Description
Puppet是美国Puppet实验室的一套基于客户端/服务器（C/S）架构的配置管理工具，它可用于管理配置文件、用户、cron任务、软件包、系统服务等。Puppet Enterprise是它的企业版。Puppet Enterprise Console是其中的一个控制台程序。 Puppet Enterprise 2017.3.6之前的2017.3.x版本中的Puppet Enterprise Console存在跨站脚本洞。远程攻击者可利用该漏洞向Puppet Enterprise Console中注入脚本。
CVSS Information
N/A
Vulnerability Type
N/A