Pankajindevops Project Scale Cross-Site Scripting Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the Pankajindevops project, specifically in the file '/scale/project'. The issue arises from an unknown function that improperly handles the 'goal' argument, allowing for remote exploitation. This vulnerability is part of a continuous delivery process with rolling releases, so specific version details are not available.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Reproduction

The vulnerability can be reproduced by sending a request to the '/scale/project' endpoint with a crafted 'goal' argument that includes malicious script content. This injected script will be executed in the user's browser, demonstrating the cross-site scripting vulnerability.