CVE-2023-0868 Information

Description

Reflected cross-site scripting in graph results in multiple versions of OpenNMS Meridian and Horizon could allow an attacker access to steal session cookies.

Reference

https://github.com/OpenNMS/opennms/pull/5740