CVE-2019-17557

It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters

published May 4, 2020

CVSS
—
EPSS
1%
Percentile
68.7
In the wild
Unconfirmed
What it is

It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters. By this mean, a user accessing the Enduser UI could execute javascript code from URL query string.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01230 · 68.7th percentile
Published
2020-05-04T12:27Z
EPSS history
Timeline
  • 04 MAY 12:27Z
    It was found that the Apache Syncope EndUser UI login page prio to 2.0.15 and 2.1.6 reflects the successMessage parameters
    cvelistv5