Security Advisory: Immuta Version 2.8.2
bishopfox.com | advisory | #xss | #advisory | #session-management | #immuta | #content-injection | #cve-2020-15952
Summary
Immuta 2.8.2 advisory: stored XSS for privilege escalation, DOM-based XSS phishing, content injection, password changes without the original, sessions surviving logout; patched in 2020.2.2+.
- Published
- Collected
--- id: 4106 title: "Security Advisory: Immuta Version 2.8.2" source_domain: bishopfox.com source_url: "https://bishopfox.com/blog/immuta-version-2-8-2-advisory" published_at: "2020-11-04T00:00:00Z" tags: ["xss", "advisory", "session-management", "immuta", "content-injection", "cve-2020-15952"] phying_url: "https://phying.com/item/4106" lang: en --- # Security Advisory: Immuta Version 2.8.2 ## Summary Immuta 2.8.2 advisory: stored XSS for privilege escalation, DOM-based XSS phishing, content injection, password changes without the original, sessions surviving logout; patched in 2020.2.2+. ## Intelligence Metadata - **Sources:** bishopfox.com - **Published:** 2020-11-04T00:00:00Z - **Original:** https://bishopfox.com/blog/immuta-version-2-8-2-advisory - **Phying News:** https://phying.com/item/4106