VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 29, 2021· Updated Aug 4, 2024

CVE-2020-24670

CVE-2020-24670

Description

The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of 'dashboardXml' parameter. Remediated in >= 7.1.0.25, >= 8.2.0.6, and >= 8.3.0.0 GA.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Hitachi Vantara/Pentahodescription
  • Hitachi/Pentahollm-fuzzy
    Range: >= 7.1.0.25, >= 8.2.0.6, >= 8.3.0.0 GA

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.