Threat Investigation
Request a demo

CVE-2018-8326

Medium

Description

A cross-site-scripting (XSS) vulnerability exists when an open source customization for Microsoft Active Directory Federation Services (AD FS) does not properly sanitize a specially crafted web request to an affected AD FS server, aka "Open Source Customization for Active Directory Federation Services XSS Vulnerability." This affects Web Customizations.

SeverityMedium
CVSS5.4
Exploit probability—
ProductMicrosoft Web Customizations
PublishedJul 11, 2018
First seenJul 11, 2018

How to fix

Update
  • microsoft web_customizations0.1 or later

Affected products

ProductAffected versionsFixed in
microsoft web_customizationsv < 0.10.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.