title: Unsafe HTML Injection in Artifact Collection Report
description: A cross-site scripting (XSS) issue in generating a collection report made it possible for malicious clients to inject JavaScript code into the static HTML file. This issue was resolved in Velociraptor 0.6.5-2.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Velociraptor
vendor: Rapid7
versions:
lessThan: 0.6.5-2, status: affected, version: 0.6.5-2, versionType: custom
}