description: In NGINX Controller 3.3.0-3.4.0, undisclosed API endpoints may allow for a reflected Cross Site Scripting (XSS) attack. If the victim user is logged in as admin this could result in a complete compromise of the system.
problem types: XSS
affected:
{
product: NGINX Controller
vendor: n/a
versions:
status: affected, version: 3.3.0-3.4.0
}