pentester.land· Jun 21, 2022· by Olivier Laflamme (@olivier_boschko)🔍 CVE-2020-4757

XSS Vulnerability in IBM Content Navigator (CVE-2020-4757)

Target Program: IBM

🎯 Vulnerability: Cross-Site Scripting (XSS)

💡 Defense Fix: Enforce Context-Aware Output Encoding, strict Content-Security-Policy (CSP), and HttpOnly cookie flags.

#XSS#CVE-2020-4757