漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Stored XSS in multiple 33.0.8files in opennms/opennms
Vulnerability Description
Multiple stored XSS were found on different nodes with unsanitized parameters in OpenMNS Horizon 33.0.8 and versions earlier than 33.1.6 on multiple platforms that allow an attacker to store on database and then inject HTML and/or Javascript on the page. The solution is to upgrade to Horizon 33.1.6, 33.1.7 or Meridian 2024.2.6, 2024.2.7 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Fábio Tomé for reporting this issue.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
OpenNMS Horizon 安全漏洞
Vulnerability Description
OpenNMS Horizon是OpenNMS公司的一种开源解决方案，可帮助您可视化和监控本地和远程网络上的所有内容。 OpenNMS Horizon 33.0.8版本和33.1.6之前版本存在安全漏洞，该漏洞源于多个节点存在存储型跨站脚本漏洞。
CVSS Information
N/A
Vulnerability Type
N/A