CVE-2018-6511

A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Puppet Enterprise Console. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6.
References
Link Resource
https://puppet.com/security/cve/CVE-2018-6511 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

History

24 Jan 2022, 16:46

Type Values Removed Values Added
CPE cpe:2.3:a:puppetlabs:puppet:*:*:*:*:enterprise:*:*:* cpe:2.3:a:puppet:puppet_enterprise:*:*:*:*:*:*:*:*

Information

Published : 2018-05-08 18:29

Updated : 2024-02-04 19:46


NVD link : CVE-2018-6511

Mitre link : CVE-2018-6511

CVE.ORG link : CVE-2018-6511


JSON object : View

Products Affected

puppet

  • puppet_enterprise
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')