Debian/dogtag-pki: medium 6.1
A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site
Action: Upgrade dogtag-pki to 10.9.1-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.9.1-1 | - |
Fixed versions
| 10.9.1-1 |
Sources
published · modified · JSON