| 제목 | XSS in Ethos Identity Service (EEID) with CAS |
|---|
| 설명 | A Reflected Cross-Site Scripting (XSS) vulnerability in the Ethos Identity CAS logout endpoint has been identified. This only applies to the product's integration with CAS; non-CAS deployments are not impacted.
[Affected Product Code Base]
Ethos Identity (EEID) 5.10.5 and all earlier versions - Fixed in Ethos Identity (EEID) 5.10.6 and later
https://elluciansupport.service-now.com/customer_center?id=community_blog&sys_id=3bc4c265476a25d008322172e36d434e
https://medium.com/@cyberninja717/reflected-cross-site-scripting-vulnerability-in-ellucian-ethos-identity-cas-logout-page-685bb1675dfb
|
|---|
| 원천 | ⚠️ https://elluciansupport.service-now.com/customer_center?id=community_blog&sys_id=3bc4c265476a25d008322172e36d434e |
|---|
| 사용자 | mikent (UID 43735) |
|---|
| 제출 | 2023. 05. 19. PM 11:32 (3 연령 ago) |
|---|
| 모더레이션 | 2023. 05. 20. AM 08:49 (9 hours later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 229596 [Ellucian Ethos Identity 까지 5.10.5 /cas/logout url 크로스 사이트 스크립팅] |
|---|
| 포인트들 | 17 |
|---|