CVE-2018-8899

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations...

CVE-2018-8899

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations...

CVE-2018-8899: Improper Neutralization of Input During Web Page Generation

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations...

PT-2018-18700

Name of the Vulnerable Software and Affected Versions IdentityServer versions 1.x through 1.5.2 IdentityServer versions 2.x through 2.1.2 Description The issue is related to the encoding of the redirect URI on the authorization response page. In some configurations, this might lead to XSS...