Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/16 12:00 a.m.•1 views

CVE-2023-45144: Improper Neutralization of Input During Web Page Generation

com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in via the OAuth method, the identityOAuth parameters sent in the GET request is vulnerable to cross site scripting XSS and XWiki syntax...

10CVSS7.7AI score0.01088EPSS
SaveExploits0References4
Rows per page
Query Builder