medium5.4
CVE-2018-8326
A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properl…
Impact
A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Web Customizations | before 0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/104656
- http://www.securitytracker.com/id/1041266
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8326
- http://www.securityfocus.com/bid/104656
- http://www.securitytracker.com/id/1041266
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8326