Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter.
References
Link | Resource |
---|---|
https://support.pega.com/support-doc/pega-security-advisory-h23-vulnerability-remediation-note | Vendor Advisory |
Configurations
History
06 Feb 2024, 17:42
Type | Values Removed | Values Added |
---|---|---|
References | () https://support.pega.com/support-doc/pega-security-advisory-h23-vulnerability-remediation-noteĀ - Vendor Advisory | |
CPE | cpe:2.3:a:pega:platform:*:*:*:*:*:*:*:* | |
First Time |
Pega
Pega platform |
31 Jan 2024, 18:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-01-31 18:15
Updated : 2024-02-06 17:42
NVD link : CVE-2023-50166
Mitre link : CVE-2023-50166
CVE.ORG link : CVE-2023-50166
JSON object : View
Products Affected
pega
- platform
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')