CVE:CVE-2018-1000611
CNNVD:CNNVD-201807-477
SURFnet OpenConext EngineBlock是一款OpenConext SAML网关。
SURFnet OpenConext EngineBlock 5.7.0版本至5.7.3版本中存在跨站脚本漏洞。远程攻击者可借助特制的URL利用该漏洞向帮助和登录页面中注入任意的Web脚本或HTML。
solution:Upgrade openconext openconext_engineblock to a higher version than 5.7.3,and avoid the version [5.7.0,5.7.3]