CVE-2020-5304

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

CVE-2020-5304: Improper Encoding or Escaping of Output

The dashboard in WhiteSource Application Vulnerability Management AVM before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data...

PT-2020-18393

Name of the Vulnerable Software and Affected Versions WhiteSource Application Vulnerability Management AVM versions prior to 20.4.1 Description The issue allows log injection via a %0A%0D substring in the idp parameter to the "/saml/login" API endpoint. This can close the current log and create a...