cvelist/2018/1000xxx/CVE-2018-1000163.json

{     "CVE_data_meta": {         "ASSIGNER": "kurt@seifried.org",         "DATE_ASSIGNED": "2018-04-06T14:09:26.585891",         "DATE_REQUESTED": "2018-03-30T10:21:08",         "ID": "CVE-2018-1000163",         "REQUESTER": "f3i@t00ls.net"     },     "affects": {         "vendor": {             "vendor_data": [                 {                     "product": {                         "product_data": [                             {                                 "product_name": "Floodlight",                                 "version": {                                     "version_data": [                                         {                                             "version_value": "1.2 and earlier"                                         }                                     ]                                 }                             }                         ]                     },                     "vendor_name": "Floodlight"                 }             ]         }     },     "data_format": "MITRE",     "data_type": "CVE",     "data_version": "4.0",     "description": {         "description_data": [             {                 "lang": "eng",                 "value": "Floodlight version 1.2 and earlier contains a Cross Site Scripting (XSS) vulnerability in the web console that can result in javascript injections into the web page. This attack appear to be exploitable via the victim browses the web console ."             }         ]     },     "problemtype": {         "problemtype_data": [             {                 "description": [                     {                         "lang": "eng",                         "value": "Cross Site Scripting (XSS)"                     }                 ]             }         ]     },     "references": {         "reference_data": [             {                 "url": "https://xiaofen9.github.io/blog/floodlight-rce/"             }         ]     } }