Description

The OpenID Connect reference implementation for MITREid Connect through 1.3.3 allows XSS due to userInfoJson being included in the page unsanitized. This is related to header.tag. The issue can be exploited to execute arbitrary JavaScript.

Remediation

References

https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/issues/1521

https://www.securitymetrics.com/blog/MITREid-Connect-cross-site-scripting-CVE-2020-5497

http://seclists.org/fulldisclosure/2020/Feb/25

http://packetstormsecurity.com/files/156574/MITREid-1.3.3-Cross-Site-Scripting.html

Related Vulnerabilities

CVE-2021-23348 Vulnerability in npm package portprocesses

CVE-2020-5259 Vulnerability in maven package org.webjars.bowergithub.dojo:dojox

CVE-2022-47105 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core

CVE-2020-22864 Vulnerability in npm package froala-editor

CVE-2022-23646 Vulnerability in npm package next

Severity

High

Classification

CWE-79 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Exploit Issue Tracking Third Party Advisory Mailing List VDB Entry