Lucene search
MitreCVELIST:CVE-2019-12250HistoryMay 21, 2019 - 3:22 p.m.
CVE-2019-12250
2019-05-2115:22:43
mitre
www.cve.org
2
EPSS
0.001
Percentile
37.3%
IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, which can be triggered by viewing a log. NOTE: the software maintainer disputes that this is a vulnerability because the request logger is not part of IdentityServer but only our development test host
Related
nvd
nvd
CVE-2019-12250
2019-05-21 16:29:01
prion
prion
Cross site scripting
2019-05-21 16:29:00
veracode
veracode
Cross-Site Scripting (XSS)
2019-05-22 11:22:01
cve
cve
CVE-2019-12250
2019-05-21 16:29:01