CVE-2017-12677 | BDVDB-2026-88931 Detail

Description#

IdentityServer3 2.4.x, 2.5.x, and 2.6.x before 2.6.1 has XSS in an Angular expression on the authorize response page, which might allow remote attackers to obtain sensitive information about the IdentityServer authorization response.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/IdentityServer/IdentityServer3/releases/tag/2.6.1

Exploit#

No public exploit known

History#

Version 12017-08-08Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.