Miliaris Amigdala Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in the report manager function of Miliaris Amigdala version 2.2.6. This vulnerability allows attackers to execute arbitrary HTML in a user's browser context by using a crafted payload. The issue arises in the report manager function, where the 'datasourceId' parameter is vulnerable to exploitation.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute arbitrary JavaScript in the context of the user's browser.

Reproduction

To reproduce this vulnerability, send a request to the report manager function with a crafted payload that includes arbitrary HTML or JavaScript in the 'datasourceId' parameter. This can be done by manipulating the URL to include the malicious payload, which will then be executed in the user's browser.