Veracode Vulnerability DatabaseVERACODE:43141Cross Site Scripting (XSS)
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%
@dcl/single-sign-on-client is vulnerable to Cross Site Scripting (XSS). An attacker is able to exploit this vulnerability by injecting malicious JavaScript code into the init function of the library. This code will be executed by the browser, allowing the attacker to take control of the victim’s session.
Related
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.0005 Low
EPSS
Percentile
17.0%