TI-2019-08647 CVE-2019-11569 · GHSA-4vx7-w6f9-96fg
Veeam ONE Reporter 9.5.0.3201 allows CSRF.
Priority MEDIUM 42
Veeam ONE Reporter 9.5.0.3201 allows CSRF.
3 records in One Reporter · all components
Veeam ONE Reporter 9.5.0.3201 allows CSRF.
Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx.
Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx.