F5 BIG-IP Application Security Manager "report_type" Cross-Site Scripting - Advisories - Secunia

セキュリティ

BIG-IPアプリケーションセキュリティマネージャのreport_typeの入力項目にクロスサイトスクリプティングの脆弱性が存在するそうです。

nnposter has reported a vulnerability in F5 BIG-IP Application Security Manager, which can be exploited by malicious people to conduct cross-site scripting attacks.
Input passed to the "report_type" parameter in "dms/policy/rep_request.php" is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of an affected site.

screenshot