Not rated

CVE-2018-8326 A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory…

Description

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.

Affected products and versions

Product	Affected versions	Fixed in
Web Customizations	Versions not published

Do you use Web Customizations?

Track this CVE Watch Web Customizations Check my SBOMs

www.cveye.io/en/cve/CVE-2018-8326

Timeline

Published July 11, 2018
Last modified August 5, 2024

References

portal.msrc.microsoft.com portal.msrc.microsoft.com
1041266 www.securitytracker.com
104656 www.securityfocus.com

Track this CVE