← All advisories

Medium severity6.1NVD Advisory· Published Nov 9, 2020· Updated Jun 17, 2026

CVE-2020-24353

CVE-2020-24353

Description

Pega Platform before 8.4.0 has a XSS issue via stream rule parameters used in the request header.

Affected products

3

Pega/Platform2 versions
cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pega:pega_platform:*:*:*:*:*:*:*:*range: <8.4
- (no CPE)range: <8.4.0
Pega Platform/Pega Platformdescription

Patches

Vulnerability mechanics

References

2

community.pega.com/knowledgebase/products/platform/release-notesnvdRelease NotesVendor Advisory
community.pega.com/knowledgebase/products/platform/resolved-issuesnvdVendor Advisory

News mentions

0

No linked articles in our index yet.