CVE-2026-90848

Governikus AusweisApp versions up to 2.5.4 are affected by a cross-site scripting (XSS) vulnerability in the StartPAOSResponse Handler component. The root cause is the manipulation of the ResultMessage argument, allowing a remote attacker to execute script in the context of the application. The a...

EUVD-2026-78245

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...

PT-2026-91827

A weakness has been identified in Governikus AusweisApp up to 2.5.4. Affected is an unknown function of the component StartPAOSResponse Handler. Executing a manipulation of the argument ResultMessage can lead to cross site scripting. The attack can be launched remotely. Upgrading to version 2.5.5...