What is GHSA-xqf6-p37p-9cxg?

GHSA-xqf6-p37p-9cxg is a security advisory published by GitHub Security Advisories with Medium severity. A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS...

Which CVE IDs does GHSA-xqf6-p37p-9cxg cover?

GHSA-xqf6-p37p-9cxg covers the following CVE IDs: CVE-2020-1055. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xqf6-p37p-9cxg?

GHSA-xqf6-p37p-9cxg has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

GHSA-xqf6-p37p-9cxgMediumCVSS 6.1

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

August 19, 2026

🔗 CVE IDs covered (1)

CVE-2020-1055 →

📋 Description

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2020-1055
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1055
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1055
https://github.com/advisories/GHSA-xqf6-p37p-9cxg