2 matches found
CVE-2020-8160
MendixSSO = 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload m...
6.1CVSS6.3AI score0.00723EPSS
SaveExploits0References2
CVE-2020-8160
MendixSSO = 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload m...
6.1CVSS6.1AI score0.00723EPSS
SaveExploits0References3
20