CVE-2020-1055 – A cross-site-scripting (XSS) vulnerability exists when Active Directory F

5 years ago

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka ‘Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability’.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-1055

Reference (s):

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1055