Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29796
HistoryMar 23, 2021 - 10:25 a.m.

Cross-Site Scripting (XSS)

2021-03-2310:25:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
cross-site scripting
pki-core
token processing service
profile ids
software

EPSS

0.001

Percentile

22.7%

pki-core is vulnerable to cross-site scripting. The vulnerability exists due to the pki-core’s Token Processing Service (TPS) not properly sanitizing Profile IDs.