CVE-2018-8326

MEDIO 5.4CVE-2018-8326 · Published 11/07/2018 · updated 17/06/2026

En resumen

CVE-2018-8326 es una vulnerabilidad MEDIO (CVSS 5.4) que afecta a web customizations (microsoft).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.6%, mayor que el 85.6% de las vulnerabilidades.
Solución: actualizar a 0.1 o posterior.

Package	Affected versions	Patched versions
web customizations microsoft	`< 0.1`	`0.1`

Description

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.

References

securityfocus.com/bid/104656 · Third Party Advisory
securitytracker.com/id/1041266 · Third Party Advisory
portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8326 · Patch

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free