Skip to content
fr Sign in
5.4 Medium

CVE-2019-3872 It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss…

Description

It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.

Affected products and versions

Product Affected versions Fixed in
picketlink Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of picketlink

The 2 CVEs of picketlink →
CVE-2019-3873 It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude… 6.4 Medium
Track this CVE