CVE-2017-1000065

MEDIUM

OpenMediaVault 2.1 - Authenticated Cross-Site Scripting in Access Rights Management

Title source: llm
STIX 2.1

Description

Multiple Cross-site scripting (XSS) vulnerabilities in rpc.php in OpenMediaVault release 2.1 in Access Rights Management(Users) functionality allows attackers to inject arbitrary web scripts and execute malicious scripts within an authenticated client's browser.

References (1)

Core 1

Scores

CVSS v3 6.1
EPSS 0.0074
EPSS Percentile 50.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (1)
openmediavault/openmediavault 2.1
Published Jul 17, 2017
Tracked Since Feb 18, 2026