The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.locatio

APPLICATION

20-04-2025 19:20

CVE-2020-36844 Vulnerabilidad documentada

Sin puntuación

Tags

#xss

#javascript

#java

#application

#security

#allow

Descripción

The KnowBe4 Security Awareness Training application before 2020-01-10 allows reflected XSS. The response has a SCRIPT element that sets window.location.href to JavaScript URL.

https://www.doyler.net/security-not-included/knowbe4-vulnerabilities

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2020-36844

Resultados similares

Coincidentes en almenos en 50% de los tags

20-04-2025 CVE-2020-36845
The KnowBe4 Security Awareness Training application before 2020-01-10 contains a redirect funct...
Ver información

19-04-2025 CVE-2016-9684
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable to a Remote Comm...
Ver información