Details
-
Bug
-
Status: Closed
-
Major
-
Resolution: Fixed
-
None
-
JIRAXPORTER 2020 Sprint 3
-
Description
After install Xporter for server. go to Process Manager Taps. The main objective of this page is to give the Admin the possibility to see export Process and mange this exported Process. So if attacker make a user privilege change account name to XSS Payload then go to issues, click in Xporter and click in export. Now any Admin's go to Process Manager_ the XSS Payload is reflected in the victim's browser
Attachments
Issue Links
- links to