Cross-Site Scripting Vulnerability in IBM WebSphere Application Server - Liberty

CVE-2020-4303

What is CVE-2020-4303?

The IBM WebSphere Application Server - Liberty versions 17.0.0.3 through 20.0.0.3 contain a vulnerability that allows for cross-site scripting (XSS) attacks. This issue permits attackers to inject arbitrary JavaScript code into the web user interface. As a result, an attacker could manipulate the application's intended behavior, potentially exposing user credentials during an active session. This vulnerability poses a serious risk as it can be exploited without the need for authentication, affecting the integrity and confidentiality of user data.

References