CVE-2024-25283

The 3DSecure 2.0 product, specifically the 3DS Authorization Challenge component by Redsys , is vulnerable to multiple reflected Cross-Site Scripting (XSS) flaws. The root cause is the lack of sanitization for the params parameter in a /rest/online request involving a /redirect?action=challenge&t...

CVE-2024-25283

...

PT-2024-20857

Name of the Vulnerable Software and Affected Versions 3DSecure 2.0 version 3DS Method Authentication Description The issue concerns a Cross-Site Scripting XSS vulnerability in the 3DSMethod Authentication of 3DSecure 2.0. This vulnerability can be exploited via a modified params parameter in a...