CVE-2017-7352

https://notcve.org/view.php?id=CVE-2017-7352

Stored Cross-site scripting (XSS) vulnerability in Pure Storage Purity 4.7.5 allows remote authenticated users to inject arbitrary web script or HTML via the "host" parameter on the 'System > Configuration > SNMP > Add SNMP Trap Manager' screen. Vulnerabilidad de Cross-Site Scripting (XSS) persistente en la versión 4.7.6 de Pure Storage Purity permite que usuarios autenticados remotos inyecten scripts web o HTML arbitrarios mediante el parámetro "host" en la pantalla 'System > Configuration > SNMP > Add SNMP Trap Manager' • http://arthrocyber.com/research#finding_3 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •