description: A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.
problem types: CWE-20 - Improper Input Validation -> CWE-134 - Use of Externally-Controlled Format String
affected:
{
product: Red Hat OpenShift API Management.
vendor: n/a
versions:
status: affected, version: Affects v2.9.1 GA.
}