1 matches found
pki-core: Stored XSS in TPS profile creation
A flaw was found in the pki-core's Token Processing Service TPS where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting XSS vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a...
5.4CVSS5.7AI score0.00764EPSS
SaveExploits0References4
20