CVE-2018-19794

https://notcve.org/view.php?id=CVE-2018-19794

Cross-site scripting (XSS) vulnerability in UiV2Public.index in Internet2 Grouper 2.2 and 2.3 allows remote attackers to inject arbitrary web script or HTML via the code parameter. Vulnerabilidad Cross-Site Scripting (XSS) en UiV2Public.index en Internet2 Grouper 2.2 y 2.3 permite que atacantes remotos inyecten scripts web o HTML arbitrarios mediante el parámetro code. • https://bugs.internet2.edu/jira/browse/GRP-1838 https://lists.internet2.edu/sympa/arc/grouper-dev/2018-07/msg00005.html https://spaces.at.internet2.edu/display/Grouper/v2.4+issues • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •