CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.4. See the original NVD description below for full technical details.
CVE
CVE-2019-3873
Severity
MEDIUM
CVSS
6.4
EPSS
0.93%
Original NVD Description
It was found that Picketlink as shipped with Jboss Enterprise Application Platform 7.2 would accept an xinclude parameter in SAMLresponse XML. An attacker could use this flaw to send a URL to achieve cross-site scripting or possibly conduct further attacks.
Related CVEs
Other vulnerabilities affecting the same vendor(s)