CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2 matches found

attackerkb•added 2018/03/22 5:29 a.m.•5 views

CVE-2018-8899

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations...

6.1CVSS5.4AI score0.01215EPSS

SaveExploits0References5

Rapid7 Vulnerability Database (full)•added 2018/03/22 12:00 a.m.•4 views

CVE-2018-8899: Improper Neutralization of Input During Web Page Generation

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations...

6.1CVSS6.3AI score0.01215EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by