Security Advisory

CVE-2020-8823

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-10 02:06:25
Last updated 2024-08-04 10:12:10
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.