A Reflected Cross Site Scripting vulnerability was found in all pki-core 10.x.x versions, where the pki-ca module from the pki-core server. This flaw is caused by missing sanitization of the GET URL parameters. An attacker could abuse this flaw to trick an authenticated user into clicking a specially crafted link which can execute arbitrary code when viewed in a browser.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2020-03-20T13:55:48

Updated: 2024-08-04T22:17:19.703Z

Reserved: 2019-03-27T00:00:00

Link: CVE-2019-10221

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-03-20T15:15:12.967

Modified: 2024-11-21T04:18:41.350

Link: CVE-2019-10221

cve-icon Redhat

Severity : Low

Publid Date: 2020-02-03T00:00:00Z

Links: CVE-2019-10221 - Bugzilla