Cross site scripting

2018-12-0306:29:00

PRIOn knowledge base

www.prio-n.com

0.002 Low

EPSS

Percentile

59.6%

JSON

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter.

CPENameOperatorVersion
groupereq2.2
groupereq2.3

CPE	Name	Operator	Version
	grouper	eq	2.2
	grouper	eq	2.3

References

bugs.internet2.edu/jira/browse/GRP-1838

lists.internet2.edu/sympa/arc/grouper-dev/2018-07/msg00005.html

spaces.at.internet2.edu/display/Grouper/v2.4+issues

0.002 Low

EPSS

Percentile

59.6%

JSON

Related for PRION:CVE-2018-19794