VYPR

Maven package

org.opennms/opennms-web-api

pkg:maven/org.opennms/opennms-web-api

Vulnerabilities (1)

  • CVE-2023-0869Feb 23, 2023
    affected <= 31.0.3

    Cross-site scripting in outage/list.htm in multiple versions of OpenNMS Meridian and Horizon allows an attacker access to confidential session information. The solution is to upgrade to Meridian 2023.1.0 or newer, or Horizon 31.0.4 or newer. Meridian and Horizon insta