← CVE Intelligence

CVE-2019-10179

[UNKNOWN] / pki-core/pki-kra PUBLISHED

Description (CNA)

A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

Affected (CNA)

Vendor / productVersions
[UNKNOWN] / pki-core/pki-kraaffected all pki-core 10.x.x versions

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.