Lucene search
Veracode Vulnerability DatabaseVERACODE:47126HistoryMay 23, 2024 - 6:30 a.m.
Cross-site Scripting (XSS)
2024-05-2306:30:53
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
cross-site scripting
vulnerability
user input
malicious scripts
invitation email
software
6.7 Medium
AI Score
Confidence
High
passbolt/passbolt_api is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to improper sanitization of user input, allowing an attacker to inject malicious scripts into the user’s first and last name fields, which execute when the setup link in the invitation email is accessed.
6.7 Medium
AI Score
Confidence
High