Cross site scripting

2020-12-1521:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

37.5%

JSON

Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.

CPENameOperatorVersion
pega_platformge8.4
pega_platformle8.4.2

CPE	Name	Operator	Version
	pega_platform	ge	8.4
	pega_platform	le	8.4.2

References

jayaramyalla.medium.com/cross-site-scripting-in-pega-cve-2020-23957-16d1c417da5f

0.001 Low

EPSS

Percentile

37.5%

JSON

Related for PRION:CVE-2020-23957