tocsin

Debian/sarg: unknown

Cross-site scripting (XSS) vulnerability in Squid Analysis Report Generator (Sarg) 2.2.4 allows remote attackers to inject arbitrary web script or HTML via a JavaScript onload event in the User-Agent

Action: Upgrade sarg to 2.2.5-1 or later.

Affected

introducedfixedlast affected
02.2.5-1-

Fixed versions

2.2.5-1

Sources

published · modified · JSON