Lucene search
PRIOn knowledge basePRION:CVE-2019-10178HistoryMar 18, 2020 - 4:15 p.m.
Cross site scripting
2020-03-1816:15:00
PRIOn knowledge base
www.prio-n.com
0.001 Low
EPSS
Percentile
35.9%
It was found that the Token Processing Service (TPS) did not properly sanitize the Token IDs from the “Activity” page, enabling a Stored Cross Site Scripting (XSS) vulnerability. An unauthenticated attacker could trick an authenticated victim into creating a specially crafted activity, which would execute arbitrary JavaScript code when viewed in a browser. All versions of pki-core are believed to be vulnerable.
Related
debiancve
debiancve
CVE-2019-10178
2020-03-18 16:15:11
nvd
nvd
CVE-2019-10178
2020-03-18 16:15:11
redhatcve
redhatcve
CVE-2019-10178
2020-02-05 09:14:18
ubuntucve
ubuntucve
CVE-2019-10178
2020-03-18 00:00:00
cve
cve
CVE-2019-10178
2020-03-18 16:15:11
veracode
veracode
Cross-site Scripting (XSS)
2021-03-23 10:25:52
cvelist
cvelist
CVE-2019-10178
2020-03-18 14:57:08
redhat
redhat
nessus
nessus
RHEL 7 : pki-core and redhat-pki-theme (RHSA-2021:0947)
2024-04-27 00:00:00
oraclelinux
oraclelinux
pki-core security and bug fix update
2021-03-17 00:00:00