Vulnerability Details : CVE-2019-8400
Potential exploit
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
Vulnerability category: Cross site scripting (XSS)
Products affected by CVE-2019-8400
- cpe:2.3:a:ory:hydra:0.11.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.9:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.10:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.12:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.1:beta1:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.1:beta2:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.1:beta3:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.1:beta4:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.9:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.10:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.14:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta2:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta9:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:alpha3:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.8:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.8:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.11:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.13:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.14:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.16:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha14:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha16:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha20:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha3:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha2:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha19:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha18:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha17:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.13:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.12:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.11:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.10:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.9:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.8:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.9:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.10:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta4:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta5:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta6:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta7:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:alpha:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:alpha1:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:alpha2:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.8:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.9:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha1:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha10:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha11:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha12:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha5:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha6:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha7:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha8:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha9:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.2:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.11.4:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta1:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta3:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:beta8:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:1.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.4.2:alpha4:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.5.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.6.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.3:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.10:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.7.12:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.5:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.8.7:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.6:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.9.15:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:*:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha13:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha15:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha21:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.0:alpha4:*:*:*:*:*:*
- cpe:2.3:a:ory:hydra:0.10.2:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2019-8400
0.34%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 54 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2019-8400
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
4.3
|
MEDIUM | AV:N/AC:M/Au:N/C:N/I:P/A:N |
8.6
|
2.9
|
NIST | |
|
6.1
|
MEDIUM | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
2.8
|
2.7
|
NIST |
CWE ids for CVE-2019-8400
-
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.Assigned by: nvd@nist.gov (Primary)
References for CVE-2019-8400
-
https://github.com/ory/hydra/blob/master/CHANGELOG.md#v100-rc3oryos9-2018-12-06
hydra/CHANGELOG.md at master · ory/hydra · GitHubRelease Notes;Third Party Advisory
-
https://www.youtube.com/watch?v=RIyZLeKEC8E
Reflected XSS in Zomato | POC Video| - YouTubeExploit;Third Party Advisory
-
https://github.com/ory/hydra/commit/9b5bbd48a72096930af08402c5e07fce7dd770f3
oauth2: Use html templates in fallback endpoints (#1202) · ory/hydra@9b5bbd4 · GitHubPatch;Third Party Advisory
-
https://drive.google.com/file/d/1-25expUYVfK6vsiCmEabUCuelOP7aUDj/view?usp=drivesdk
Bildschirmfoto_2018-12-06_um_18.53.04 (1).png - Google DriveRelease Notes;Third Party Advisory
-
https://hackerone.com/reports/456333
#456333 [auth2.zomato.com] Reflected XSS at `oauth2/fallbacks/error` | ORY Hydra an OAuth 2.0 and OpenID Connect ProviderExploit;Issue Tracking;Third Party Advisory
Jump to