Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Jboss EAP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-10688 - Vulnerability Database
Jboss EAP

Jboss EAP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-10688

Medium
Reference: CVE-2020-10688
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-10688
Title: Jboss EAP Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Overview:

A cross-site scripting (XSS) flaw was found in RESTEasy in versions before 3.11.1.Final and before 4.5.3.Final where it did not properly handle URL encoding when the RESTEASY003870 exception occurs. An attacker could use this flaw to launch a reflected XSS attack.