Threats tagged 'ghsa-fq78-xg9g-8fwp'

A vulnerability in migration-planner allows an authenticated attacker to store a malicious javascript: URL in the AgentStatusUpdate.CredentialUrl field. When viewed in the Hybrid Cloud Console, this can lead to Cross-Site Scripting (XSS), enabling script execution in the victim's session and potential disclosure of sensitive information. Red Hat has assessed that this vulnerability does not affect any currently supported Red Hat products.