CVE-2020-8788

Publication date

2020-02-07 13:07:53

Family

mitre

State

PUBLISHED

Description

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.