Security Advisory

CVE-2018-8899

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-03-22 05:00:00

Last updated 2024-08-05 07:10:47

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations.

← Browse all CVEs View on cve.org ↗