CVE-2018-8326

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.

Score

CVSS 3.0 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2018-07-11

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Web Customizations (Microsoft)

References

• http://www.securityfocus.com/bid/104656
• http://www.securitytracker.com/id/1041266
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8326