6 matches found
CVE-2024-25282
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25283
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage...
CVE-2024-25283
The 3DSecure 2.0 product, specifically the 3DS Authorization Challenge component by Redsys , is vulnerable to multiple reflected Cross-Site Scripting (XSS) flaws. The root cause is the lack of sanitization for the params parameter in a /rest/online request involving a /redirect?action=challenge&t...
CVE-2024-25282
The 3DSecure 2.0 product, specifically the 3DS Method Authentication component, is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper sanitization or validation of the base64-encoded params parameter during a /rest/online request containing a /redirect?action=challenge&txn=...