CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

CVE-2021-33904

In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information...

PT-2021-20359 · Accela · Accela Civic Platform

Name of the Vulnerable Software and Affected Versions: Accela Civic Platform versions prior to 21.2 Description: The issue concerns a security problem where the servProvCode parameter in the "security/hostSignon.do" endpoint is vulnerable to XSS. The vendor has noted that there are configurable...