CVE-2020-8788

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter

published February 7, 2020

CVSS
—
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00812 · 56.6th percentile
Published
2020-02-07T13:07Z
EPSS history
Timeline
  • 07 FEB 13:07Z
    Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter
    cvelistv5