Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based XSS.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Immuta 跨站脚本漏洞
Vulnerability Description
Immuta是Immuta公司的一个用于数据分析的数据整理平台。 Immuta v2.8.2 版本存在跨站脚本漏洞，该漏洞允许攻击者将低特权用户将特权升级为管理权限，此外，未经身份验证的攻击者可以诱骗未经身份验证的Immuta用户，以窃取其凭据。
CVSS Information
N/A
Vulnerability Type
N/A