whitesource
NPM
Releases156
Frequency2 weeks 17 hours
Last Release
Whitesource Node Module
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 20.4.1 | 7.5 HIGH | 5 MEDIUM | ||
The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. This closes the current log and creates a new log with one line of data. The attacker can also insert malicious data and false entries. | ||||