CVE-2020-26713

REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort

published January 12, 2021

CVSS
—
EPSS
1%
Percentile
67.6
In the wild
Unconfirmed
What it is

REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort. The information submitted by the user is immediately returned in the response and not escaped leading to the reflected XSS vulnerability. Attackers can exploit vulnerabilities to steal login session information or borrow user rights to perform unauthorized acts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01186 · 67.6th percentile
Published
2021-01-12T14:17Z
EPSS history
Timeline
  • 12 JAN 14:17Z
    REDCap 10.3.4 contains a XSS vulnerability in the ToDoList function with parameter sort
    cvelistv5