CVE-2019-10146

A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.

Score

CVSS 3.1 4.7 Medium

Status

Modified - secalert@redhat.com

Published

2020-03-18

Last modified

2024-08-04

Weaknesses

CWE-79

Affected products

• Dogtagpki (Dogtagpki)
• Pki-core (Red Hat)
• Enterprise Linux (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10146