Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30049
HistoryApr 20, 2021 - 7:43 a.m.

Cross-Site Scripting (XSS)

2021-04-2007:43:35
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

36.1%

flow-server is vulnerable to cross-site scripting (XSS). A remote attacker is able to inject and execute arbtirary Javascript in a user’s browser via the error template.

CPENameOperatorVersion
flow serverle1.4.3
flow serverle1.0.13

0.001 Low

EPSS

Percentile

36.1%