Description (CNA)
A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Red Hat OpenShift API Management. | affected Affects v2.9.1 GA. |
CWE
CWE-20
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1930083
- https://access.redhat.com/security/cve/CVE-2021-3442
ADP enrichment
No English description supplied.