Lucene search

K

Veracode Vulnerability DatabaseVERACODE:47320

HistoryJun 03, 2024 - 8:31 a.m.

Cross-site Scripting (XSS)

2024-06-0308:31:00

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

2

cross-site scripting

simplesamlphp

javascript code

content security policies

vulnerability

6.8 Medium

AI Score

Confidence

High

SimpleSAMLphp is vulnerable to Cross-site Scripting (XSS). The vulnerability is due to unvalidated metadata endpoints, allowing malicious parties to substitute URLs with JavaScript code, leading to execution of the code in the user’s browser if strict Content Security Policies are not enforced.

6.8 Medium

AI Score

Confidence

High