CVE-2019-8400

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...

PT-2019-19013

Name of the Vulnerable Software and Affected Versions ORY Hydra versions prior to v1.0.0-rc.3+oryOS.9 Description The issue concerns a Reflected XSS that can be triggered via the oauth2/fallbacks/error endpoint, specifically through the error hint parameter. Recommendations For versions prior to...