Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19611
Reference (s):
- http://racktables.com
- https://github.com/RackTables/racktables/commit/2ce35adeaa47f60dc51875b2339725db3b23e827