CVE-2015-6502

Published: 2017-12-11T17:29Z

Last Modified: 2024-11-21T02:35Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Cross-site scripting (XSS) vulnerability in the console in Puppet Enterprise before 2015.2.1 allows remote attackers to inject arbitrary web script or HTML via the string parameter, related to Login Redirect. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt