Red Hat Security Advisory

RHSA-2020:0754

novnc security update

Released 2020-03-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenStack Platform 13.0 novnc-1.1.0-2.el7ost
Red Hat OpenStack Platform 13.0 for RHEL 7.6 EUS Server novnc-1.1.0-2.el7ost

Fixes 1 record

TI-2017-13790 CVE-2017-18635 · GHSA-49rv-g7w5-m8xx

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server…

LOW 35

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.04788 Published 2019-09-25 Partial fix · 0.6.2 CWE-79