Lucene search
Veracode Vulnerability DatabaseVERACODE:25155HistoryMay 04, 2020 - 5:14 a.m.
Cross-Site Scripting (XSS)
2020-05-0405:14:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
40.0%
syncope-client-enduser is vulnerable to cross-site scripting (XSS). Lack of sanitization in enduser notifications allow a remote attacker to inject and execute abitrary Javascript in a user’s browser via the successMessage.
| CPE | Name | Operator | Version |
|---|---|---|---|
| apache syncope client enduser | le | 2.1.5 | |
| apache syncope client enduser | le | 2.0.14 |
Related
nvd
nvd
CVE-2019-17557
2020-05-04 13:15:11
github
github
Cross-site scripting in Apache Syncome EndUser
2022-01-06 19:38:07
cve
cve
CVE-2019-17557
2020-05-04 13:15:11
cvelist
cvelist
CVE-2019-17557
2020-05-04 12:27:31
osv
osv
Cross-site scripting in Apache Syncome EndUser
2022-01-06 19:38:07
CVE-2019-17557
2020-05-04 13:15:00
prion
prion
Design/Logic Flaw
2020-05-04 13:15:00