CVE-2018-6510

published 2018-05-08

CVE-2018-6510: A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

A cross-site scripting vulnerability in Puppet Enterprise Console of Puppet Enterprise allows a user to inject scripts into the Puppet Enterprise Console when using the Orchestrator. Affected releases are Puppet Puppet Enterprise: 2017.3.x versions prior to 2017.3.6.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
debian	puppet	—	—
puppet	puppet_enterprise	< 2017.3.6	2017.3.6
puppet	puppet_enterprise	>= 2017.3.x < 2017.3.6	2017.3.6

CWE-79