Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:22373
HistoryJan 28, 2020 - 3:19 a.m.

Cross-Site Scripting (XSS)

2020-01-2803:19:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5

0.001 Low

EPSS

Percentile

22.9%

simplesamlphp/simplesamlphp is vulnerable to cross-site scripting (XSS). The vulnerability exists through the unsanitized value of $this->text in Utils/EMail.php, which is subsequently rendered and executed when a browser loads www/errorreport.php.

CPENameOperatorVersion
simplesamlphp/simplesamlphple1.18.3

0.001 Low

EPSS

Percentile

22.9%