Cross site request forgery (csrf)

2020-11-0914:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

36.3%

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header.

CPENameOperatorVersion
pega_platformlt8.4

CPE	Name	Operator	Version
	pega_platform	lt	8.4

References

community.pega.com/knowledgebase/products/platform/release-notes

community.pega.com/knowledgebase/products/platform/resolved-issues?q=527502

0.001 Low

EPSS

Percentile

36.3%

Related for PRION:CVE-2020-24353