CVE-2018-17369

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

Cross site scripting

An issue was discovered in springbootauthority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or description parameter...

PT-2018-13997

Name of the Vulnerable Software and Affected Versions springboot authority versions prior to 2017-03-06 Description An issue was discovered that allows stored XSS via the admin/role/edit endpoint, specifically through the roleKey, name, or description parameters. Recommendations For versions prio...