CVE-2017-12677

IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to…

published August 8, 2017

CVSS
—
EPSS
1%
Percentile
63.6
In the wild
Unconfirmed
What it is

IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the IdentityServer authorization response.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01042 · 63.6th percentile
Published
2017-08-08T01:00Z
EPSS history
Timeline
  • 08 AUG 01:00Z
    IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to…
    cvelistv5