Identityserver Identityserver4
2 CVEs affecting Identityserver Identityserver4. Latest disclosed: 2019-05-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-12250 | Medium | 6.1 | 2019-05-21 | IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorContext method, whic… |
CVE-2018-8899 | Medium | 6.1 | 2018-03-22 | IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to X… |