Micro Focus GroupWise Admin Console Cross Site Scripting Vulnerability (CVE-2016-5760)
Publish date: 24 de noviembre de 2016
Gravedad: Medio
Descripci¨®n
A cross-site scripting vulnerability has been reported in the administrator console of Micro Focus GroupWise. The vulnerability is due to insufficient validation of user input on GWT RPC commands sent as a result of the fragment portion of the request URI. A remote attacker can exploit this vulnerability by enticing a target user to click on a specially crafted URL. Successful exploitation would result in the execution of arbitrary script code in the context of the target user's browser.
Revelaci¨®n de la informaci¨®n
Apply associated live casino online DPI Rules.
Soluciones
live casino online Deep Security DPI Rule Number: 1000552