Description (CNA)
The Velociraptor GUI contains an editor suggestion feature that can display the description field of a VQL function, plugin or artifact. This field was not properly sanitized and can lead to cross-site scripting (XSS). This issue was resolved in Velociraptor 0.6.5-2.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Rapid7 / Velociraptor | affected 0.6.5-2 before 0.6.5-2 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.