Description

Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the "ActionStringID" function.

Remediation

References

CVE-2020-8774

Related Vulnerabilities

WordPress Plugin Google Map Remote Code Execution (1.0)

WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)

Oracle HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2019-3822)

CakePHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2006-5031)

Jenkins Other Vulnerability (CVE-2022-2048)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2020-8774