Identityserver / Identityserver4

2 CVEs

CVE ID	Description	Severity	CVSS	Published
CVE-2019-12250	IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, whic…	MEDIUM	6.1	May 21, 2019
CVE-2018-8899	IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to X…	MEDIUM	6.1	Mar 22, 2018

Rows per page

Showing 1 to 2 of 2 CVEs