Lucene search
PRIOn knowledge basePRION:CVE-2018-25090HistoryMar 13, 2024 - 9:15 a.m.
Design/Logic Flaw
2024-03-1309:15:00
PRIOn knowledge base
www.prio-n.com
8
design flaw
logic flaw
xss attack
web page generation
user interaction
limited impact
confidentiality
integrity
availability
An unauthenticated remote attacker can use an XSS attack due to improper neutralization of input during web page generation. User interaction is required. This leads to a limited impact of confidentiality and integrity but no impact of availability.
