Lucene search
Veracode Vulnerability DatabaseVERACODE:6884HistoryJun 28, 2018 - 1:01 p.m.
Cross-site Scripting (XSS)
2018-06-2813:01:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
EPSS
0.68
Percentile
98.0%
Microsoft.AspNet.SignalR is vulnerable to cross-site scripting (XSS) attack. The application does not properly sanitize user-supplied input before displaying it. This can allow a malicious user to inject and execute arbitrary code in the target user’s browser which can lead to access to authentication cookies that can allow a user to elevate their privileges as well. This vulnerability also affects Visual Studio Team Foundation Server 2013.
Related
prion
prion
Cross site scripting
2013-12-11 00:55:00
cvelist
cvelist
CVE-2013-5042
2013-12-11 00:00:00
cve
cve
CVE-2013-5042
2013-12-11 00:55:03
symantec
symantec
Microsoft ASP.NET SignalR CVE-2013-5042 Cross Site Scripting Vulnerability
2013-12-10 00:00:00
nvd
nvd
CVE-2013-5042
2013-12-11 00:55:03
nessus
nessus
mskb
mskb
openvas
openvas
Microsoft VS Team Foundation Server SignalR XSS Vulnerability (2905244)
2013-12-11 00:00:00
securityvulns
securityvulns
Microsoft SignalR library crossite scripting
2013-12-16 00:00:00