CVE-2019-10146

Description

A Reflected Cross Site Scripting flaw was found in all pki-core 10.x.x versions module from the pki-core server due to the CA Agent Service not properly sanitizing the certificate request page. An attacker could inject a specially crafted value that will be executed on the victim's browser.

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10146

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS