cve/2021/CVE-2021-33904.md
2024-06-18 02:51:15 +02:00

832 B

CVE-2021-33904

Description

** DISPUTED ** In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information."

POC

Reference

Github