| Package | Affected versions | Patched versions |
|---|---|---|
| dogtagpki | ≥ 10.0, ≤ 10.7.3 |
A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free