PT-2017-17822

Name of the Vulnerable Software and Affected Versions OpenIDM versions prior to 4.0.1 and 4.5.1 Description The issue allows for reflected cross-site scripting XSS attacks within the Admin UI. This can be demonstrated by exploiting the sortKeys parameter to the authzRoles script under the...