Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-8400
4.3
MEDIUMCVSS v2
Published
February 17, 2019
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
ory/hydra
GitHubInternet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
GitHubInternet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.= 0.10.4, = 0.10.5, = 0.10.6, = 0.10.7, = 0.10.8, = 0.10.9, = 0.10.10, = 0.11.0, = 0.11.1, = 0.11.7, = 0.11.9, = 0.11.10, = 0.11.12, = 0.11.3, = 0.11.6, = 0.11.14, = 1.0.0, = 0.11.2, = 0.11.4, = 0.1, = 0.2.0, = 0.5.1, = 0.5.2, = 0.5.3, = 0.5.4, = 0.3.1, = 0.4.1, = 0.4.2, = 0.4.3, = 0.5.6, = 0.5.8, = 0.6.6, = 0.6.8, = 0.6.1, = 0.6.2, = 0.6.3, = 0.6.4, = 0.3.0, = 0.4.0, = 0.5.0, = 0.5.5, = 0.5.7, = 0.6.0, = 0.6.5, = 0.6.7, = 0.6.9, = 0.6.10, = 0.7.0, = 0.7.1, = 0.8.1, = 0.8.2, = 0.8.3, = 0.8.4, = 0.9.9, = 0.9.10, = 0.9.11, = 0.9.12, = 0.9.13, = 0.10.0, = 0.7.2, = 0.7.4, = 0.7.11, = 0.7.13, = 0.8.6, = 0.9.0, = 0.9.5, = 0.9.7, = 0.9.14, = 0.9.16, = 0.10.1, = 0.10.3, = 0.7.6, = 0.7.7, = 0.7.8, = 0.7.9, = 0.9.1, = 0.9.2, = 0.9.3, = 0.9.4, = 0.7.3, = 0.7.5, = 0.7.10, = 0.7.12, = 0.8.0, = 0.8.5, = 0.8.7, = 0.9.6, = 0.9.8, = 0.9.15, = 0.10.2NVD