CVE-2018-8899

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

IdentityServer IdentityServer4 1.x before 1.5.3 and 2.x before 2.1.3 does not encode the redirect URI on the authorization response page, which might lead to XSS in some configurations.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/IdentityServer/IdentityServer4/commit/21d0da227f50ac102de469a13bc5a15d2cc0f895Patch, Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/issues/2164Issue Tracking, Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/releases/tag/1.5.3Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/releases/tag/2.1.3Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/commit/21d0da227f50ac102de469a13bc5a15d2cc0f895Patch, Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/issues/2164Issue Tracking, Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/releases/tag/1.5.3Third Party Advisory
https://github.com/IdentityServer/IdentityServer4/releases/tag/2.1.3Third Party Advisory

Timeline

Published: Mar 22, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-89006.1The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to i CVE-2018-89017.8An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. A local user with database access privileges can read the CVE-2018-89026.5An issue was discovered in Ivanti Avalanche for all versions between 5.3 and 6.2. The impacted products used a single shared key encryption CVE-2018-89035.4Open-AudIT Professional 2.1 allows XSS via the Name or Description field on the Credentials screen.CVE-2018-89047.8In Windows Master (aka Windows Optimization Master) 7.99.13.604, the driver file (WoptiHWDetect.SYS) allows local users to cause a denial of CVE-2018-89058.8In LibTIFF 4.0.9, a heap-based buffer overflow occurs in the function LZWDecodeCompat in tif_lzw.c via a crafted TIFF file, as demonstrated CVE-2018-89066.1dsmall v20180320 has XSS via a crafted street address to public/index.php/home/memberaddress/index.html, which is mishandled at public/index CVE-2018-89088.8An issue was discovered in /admin/?/user/add in Frog CMS 0.9.5. The application's add user functionality suffers from CSRF. A malicious user CVE-2018-89097.5The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a CVE-2018-89105.4Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Drive before 1.0.1-10253 allows remote authenticated users to inj CVE-2018-89115.4Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology Note Station before 2.5.1-0844 allows remote authenticated users CVE-2018-89125.4Cross-site scripting (XSS) vulnerability in SYNO.NoteStation.Note in Synology Note Station before 2.5.1-0844 allows remote authenticated use