CVE Database
/

CVE-2018-8326

Back to search

CVE-2018-8326

Published: Jul 11, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.

VendorProductVersions

Microsoft

Web Customizations

affected
Active Directory Federation Services

References

1041266
vdb-entry
x_refsource_SECTRACK
104656
vdb-entry
x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now