| Package | Affected versions | Patched versions |
|---|---|---|
| dogtagpki | ≥ 10.0, ≤ 10.8.3 |
A vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery request search page, enabling a Reflected Cross Site Scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free