Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:29731
HistoryMar 17, 2021 - 4:06 a.m.

CVE-2019-10221 Pki-core: Reflected XSS In Getcookies?url= Endpoint In CA

2021-03-1704:06:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
pki-core
cross-site scripting
getcookies endpoint
url parameters
vulnerability

EPSS

0.001

Percentile

38.1%

pki-core is vulnerable to cross-site scripting. The vulnerability exists due to a missing sanitization of the GET URL parameters.