Approved changes feed: RSS · Atom
cpe:2.3:a:brian-ruf:oscal-gui:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Brian Ruf (04655b64-db70-5d94-9f7f-f3048d90bdce) |
|---|---|
| Product | Oscal Gui (aea105d3-e2b8-5a63-bfec-d7abf668d7f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34417 |
vulnerable | 2026-07-29 00:43:24.132881 |
OSCAL-GUI Reflected XSS via project parameter in oscal-forms.php
MEDIUM (6.1)
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious content through the project request parameter in oscal-forms.php. The parameter value is URL-decoded and assigned to the project_id variable without sanitization in oscal-functions.php, and when the supplied project ID is not found, the unsanitized value is concatenated into an error message via the Messages() function and reflected into the HTML response body without encoding.
Published: 2026-06-09T21:02:40.964Z
Updated: 2026-07-14T18:40:31.337Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-34416 |
vulnerable | 2026-07-29 00:43:24.132653 |
OSCAL-GUI Reflected XSS via project parameter in oscal.php
MEDIUM (6.1)
OSCAL-GUI contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to execute arbitrary JavaScript in a victim's browser by injecting malicious input through the project request parameter. Attackers can craft a malicious URL containing unsanitized input that breaks out of the JavaScript string and HTML attribute context in the body onload event handler to execute arbitrary scripts when the link is visited by a victim.
Published: 2026-06-09T20:59:29.063Z
Updated: 2026-07-14T18:40:30.616Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.