Description
IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.
Remediation
References
Related Vulnerabilities
Grafana Incorrect Authorization Vulnerability (CVE-2022-31107)
WordPress 2.0.2 Username Remote PHP Code Injection Vulnerability (0.6.2 - 2.0.2)
Squid Out-of-bounds Write Vulnerability (CVE-2019-18676)
WordPress Plugin Cookie Information-Free GDPR Consent Solution Security Bypass (2.0.22)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-4382)