CVE-2019-14915
An issue was discovered in PRiSE adAS 1.7.0. Certificate data are not properly escaped. This leads to XSS when submitting a rogue certificate.
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2019-09-20
- Last modified
- 2024-08-05
- Weaknesses
- CWE-79
Affected products
References
- http://www.adas-sso.com/es/extra/download.php
- https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas