漏洞描述
WSO2 Data Analytics Server 3.1.0 is susceptible to cross-site scripting in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
github.comhttps://github.com/cybersecurityworks/Disclosed/issues/15↗docs.wso2.comhttps://docs.wso2.com/display/Security/Security+Advisory+WSO2-2017-0265↗cybersecurityworks.comhttps://cybersecurityworks.com/zerodays/cve-2017-14651-wso2.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2017-14651↗github.comhttps://github.com/ARPSyndicate/cvemon↗