mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 13:19:29 +02:00
710 B
710 B
CVE-2020-23957
Description
Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.
POC
Reference
Github
No PoCs found on GitHub currently.