Cross site scripting

2019-02-1706:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

40.9%

JSON

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

CPENameOperatorVersion
hydraeq0.10.4
hydraeq0.10.5
hydraeq0.10.6
hydraeq0.10.7
hydraeq0.10.8
hydraeq0.10.9
hydraeq0.10.10
hydraeq0.11.0
hydraeq0.11.1
hydraeq0.11.2

Name	Operator	Version
hydra	eq	0.10.4
hydra	eq	0.10.5
hydra	eq	0.10.6
hydra	eq	0.10.7
hydra	eq	0.10.8
hydra	eq	0.10.9
hydra	eq	0.10.10
hydra	eq	0.11.0
hydra	eq	0.11.1
hydra	eq	0.11.2

Rows per page:

1-10 of 1291

References

drive.google.com/file/d/1-25expUYVfK6vsiCmEabUCuelOP7aUDj/view?usp=drivesdk

github.com/ory/hydra/blob/master/CHANGELOG.md

github.com/ory/hydra/commit/9b5bbd48a72096930af08402c5e07fce7dd770f3

hackerone.com/reports/456333

www.youtube.com/watch?v=RIyZLeKEC8E

0.001 Low

EPSS

Percentile

40.9%

JSON

Related for PRION:CVE-2019-8400