Lucene search
PRIOn knowledge basePRION:CVE-2020-5304HistoryJun 08, 2020 - 5:15 p.m.
Code injection
2020-06-0817:15:00
PRIOn knowledge base
www.prio-n.com
5
The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data and false entries.
| CPE | Name | Operator | Version |
|---|---|---|---|
| whitesource | lt | 20.4.1 |
Related
cve
cve
CVE-2020-5304
2020-06-08 17:15:10
nvd
nvd
CVE-2020-5304
2020-06-08 17:15:10
cvelist
cvelist
CVE-2020-5304
2020-06-08 16:12:06