tocsin

Debian/xymon: medium 5.4

Multiple cross-site scripting (XSS) vulnerabilities in Xymon 4.1.x, 4.2.x, and 4.3.x before 4.3.25 allow (1) remote Xymon clients to inject arbitrary web script or HTML via a status-message, which is

Action: Upgrade xymon to 4.3.25-1 or later.

Affected

introducedfixedlast affected
04.3.25-1-

Fixed versions

4.3.25-1

Sources

published · modified · JSON