medium6.1
CVE-2020-8788
Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter.
Impact
Synaptive Medical ClearCanvas ImageServer 3.0 Alpha allows XSS (and HTML injection) via the Default.aspx UserName parameter. NOTE: the issues/227 reference does not imply that the affected product can be downloaded from GitHub. It was simply a convenient location for a public bug report.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synaptivemedical | Clearcanvas | Version 3.0 |