CVE-2020-11626

Two Cross Site Scripting (XSS) vulnerabilities affect EJBCA in the Public Web and the Certificate/CRL download servlets, affecting versions before 6.15.2.6 and 7.x before 7.3.1.2. The issue is caused by XSS flaws in these servlet components. Publicly disclosed details are limited to the existence...