Количество 2
Количество 2
CVE-2020-5497
около 6 лет назад
The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.
CVSS3: 6.1
EPSS: Низкий
GHSA-c2h6-7gm8-cv4w
почти 6 лет назад
XSS in MITREid Connect
CVSS3: 6.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-5497 The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript. | CVSS3: 6.1 | 0% Низкий | около 6 лет назад |
| GHSA-c2h6-7gm8-cv4w XSS in MITREid Connect | CVSS3: 6.1 | 0% Низкий | почти 6 лет назад |
Уязвимостей на страницу
20