Description
It was found that a SAMLRequest containing a script could be processed by Picketlink versions shipped in Jboss Application Platform 7.2.x and 7.1.x. An attacker could use this to send a malicious script to achieve cross-site scripting and obtain unauthorized information or conduct further attacks.
Remediation
References
Related Vulnerabilities
WordPress Plugin Ad Inserter-Ad Manager & AdSense Ads Multiple Vulnerabilities (1.5.2)
Dotclear Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-1613)
MySQL CVE-2015-4904 Vulnerability (CVE-2015-4904)
Apache Tomcat Other Vulnerability (CVE-2007-3384)
WordPress Plugin WordPress Download Manager Multiple Vulnerabilities (2.8.7)