CVE-2019-10221
20.03.2020, 15:15
A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.
| Vendor | Product | Version |
|---|---|---|
| redhat | enterprise_linux | 7.0 |
| redhat | enterprise_linux | 8.0 |
| dogtagpki | dogtagpki | 10.0 ≤ 𝑥 ≤ 10.8.3 |
𝑥
= Vulnerable software versions
Ubuntu Releases