CVE-2020-5497

MEDIUM6.1EPSS 0.31%

XSS in MITREid Connect

Published: 4/1/2020Modified: 11/8/2023

Description

The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.

Affected packages (1)

Maven/org.mitre:openid-connect-serverfrom 0, <= 1.3.3

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	MEDIUM6.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References (7)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-5497
WEBhttp://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html
WEBhttp://seclists.org/fulldisclosure/2020/Feb/25
WEBhttps://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1521
WEBhttps://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/pull/1526
WEBhttps://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/pull/1527
WEBhttps://www.securitymetrics.com/blog/MITREid-Connect-cross-site-scripting-CVE-2020-5497