Files
CVEs-PoC/2020/CVE-2020-23957.md
T
2024-05-25 21:48:12 +02:00

710 B

CVE-2020-23957

Description

Pega Platform through 8.4.x is affected by Cross Site Scripting (XSS) via the ConnectionID parameter, as demonstrated by a pyActivity=Data-TRACERSettings.pzStartTracerSession request to a PRAuth URI.

POC

Reference

Github

No PoCs found on GitHub currently.