Lucene search
Veracode Vulnerability DatabaseVERACODE:40232HistoryApr 20, 2023 - 4:02 p.m.
Cross-Site Scripting (XSS)
2023-04-2016:02:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4
cross-site scripting
vulnerability
sanitization
redirect url
reflection
software
0.001 Low
EPSS
Percentile
32.3%
pay is vulnerable to Cross-Site Scripting (XSS). The vulnerability is caused by a lack of sanitization due to the back parameter in payments_controller.rb which allows an attacker to inject an arbitrary redirect URL resulting in reflected Cross-site scripting.
Related
cvelist
cvelist
github
github
cve
cve
CVE-2023-30614
2023-04-19 18:15:07
prion
prion
Cross site scripting
2023-04-19 18:15:00
osv
osv
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in Pay
2023-04-20 21:28:48
CVE-2023-30614
2023-04-19 18:15:07
nvd
nvd
CVE-2023-30614
2023-04-19 18:15:07