Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2019-11274

UAA SCIM Filter XSS

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
pivotal

Description

Cloud Foundry UAA, versions prior to 74.0.0, is vulnerable to an XSS attack. A remote unauthenticated malicious attacker could craft a URL that contains a SCIM filter that contains malicious JavaScript, which older browsers may execute.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry UAA Release (OSS)

  • prior to v74.0.0affected

References