Lucene search
Veracode Vulnerability DatabaseVERACODE:20306HistoryMay 22, 2019 - 11:22 a.m.
Cross-Site Scripting (XSS)
2019-05-2211:22:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
37.3%
IdentityServer4 is vulnerable to cross-site scripting (XSS) attacks. The vulnerability exists due to the lack of validations on httpContext parameter in the LogForErrorContext function in host/Extensions/RequestLoggerMiddleware.cs file, allowing remote attackers to inject and execute arbitrary JavaScript code in a victim’s browser.
Related
nvd
nvd
CVE-2019-12250
2019-05-21 16:29:01
prion
prion
Cross site scripting
2019-05-21 16:29:00
cvelist
cvelist
CVE-2019-12250
2019-05-21 15:22:43
cve
cve
CVE-2019-12250
2019-05-21 16:29:01