Security Advisory

CVE-2019-3872

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-06-12 13:45:56

Last updated 2024-08-04 19:19:18

Assigner redhat

CVSS score 5.4

State PUBLISHED

Description

It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.

← Browse all CVEs View on cve.org ↗