Описание
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
Дополнительная информация
Статус:
EPSS
6.4 Medium
CVSS3
Связанные уязвимости
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
Уязвимость компонента Picketlink платформы JBoss Enterprise Application Platform, позволяющая нарушителю осуществлять межсайтовые сценарные атаки
EPSS
6.4 Medium
CVSS3