---
id: 4106
title: "Security Advisory: Immuta Version 2.8.2"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/immuta-version-2-8-2-advisory"
published_at: "2020-11-04T00:00:00Z"
tags: ["xss", "advisory", "session-management", "immuta", "content-injection", "cve-2020-15952"]
phying_url: "https://phying.com/item/4106"
lang: en
---

# Security Advisory: Immuta Version 2.8.2

## Summary

Immuta 2.8.2 advisory: stored XSS for privilege escalation, DOM-based XSS phishing, content injection, password changes without the original, sessions surviving logout; patched in 2020.2.2+.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2020-11-04T00:00:00Z
- **Original:** https://bishopfox.com/blog/immuta-version-2-8-2-advisory
- **Phying News:** https://phying.com/item/4106