Description (CNA)
SecureAuth.aspx in SecureAuth IdP 9.3.0 suffers from a client-side template injection that allows for script execution, in the same manner as XSS.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://know.bishopfox.com/advisories
- https://docs.secureauth.com/display/SID/SecureAuth+IdP+Latest+Releases
- https://labs.bishopfox.com/advisories/secureauth-version-9.3
ADP enrichment
No English description supplied.