Whitesource

DATE	CVE	VULNERABILITY TITLE	RISK
2020-06-08	CVE-2020-5304	Improper Encoding or Escaping of Output vulnerability in Whitesourcesoftware Whitesource The dashboard in WhiteSource Application Vulnerability Management (AVM) before version 20.4.1 allows Log Injection via a %0A%0D substring in the idp parameter to the /saml/login URI. network low complexity whitesourcesoftware CWE-116	7.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.