VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 17, 2020· Updated Jun 17, 2026

CVE-2020-14408

CVE-2020-14408

Description

An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injection of arbitrary JavaScript code into a web page's content, creating a Reflected XSS attack vector.

Affected products

3
  • Agentejo/Cockpit2 versions
    cpe:2.3:a:agentejo:cockpit:0.10.2:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:agentejo:cockpit:0.10.2:*:*:*:*:*:*:*
    • (no CPE)range: =0.10.2
  • Agentejo/Cockpitdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.