Skip to content
Sign in
5.4 Medium

CVE-2019-3872 It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss…

Description

It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.

Affected products and versions

Product Affected versions Fixed in
picketlink Versions not published

Other CVEs of picketlink

The 2 CVEs of picketlink →
CVE-2019-3873 It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude… 6.4 Medium
Track this CVE