Threats tagged 'ghsa-jw6g-mv47-3fhf'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.1	CVE-2026-11854The authentication endpoint generates an error message that includes reflected data directly from the request without Medium6.12026-10-28GCVE DatabaseCVE-2026-11854 An authentication endpoint reflects unsanitized request data in error messages, enabling cross-site scripting (XSS) attacks. Attackers can inject malicious scripts executed in victims' browsers, potentially redirecting users, altering the page interface, or stealing information. Session hijacking is mitigated by the httpOnly flag on session cookies. Report on CVE-2026-11854 Vulnerability CWE-79 #ghsa-jw6g-mv47-3fhf	GCVE Database	2026-10-28

Page 1 of 1