CVE-2019-8400

nvd nist

Published: Feb 17, 2019Modified: Jun 17, 2026

6.1

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

Affected (129)

Products: Ory: Hydra

Ory

1 product

Hydra

Configuration A

129 vulnerable

Vulnerable Software	Affected Versions
Ory Hydra	Version 0.10.0
Ory Hydra	Version 0.10.0 alpha10
Ory Hydra	Version 0.10.0 alpha11
Ory Hydra	Version 0.10.0 alpha12
Ory Hydra	Version 0.10.0 alpha13
Ory Hydra	Version 0.10.0 alpha14
Ory Hydra	Version 0.10.0 alpha15
Ory Hydra	Version 0.10.0 alpha16
Ory Hydra	Version 0.10.0 alpha17
Ory Hydra	Version 0.10.0 alpha18
Ory Hydra	Version 0.10.0 alpha19
Ory Hydra	Version 0.10.0 alpha1
Ory Hydra	Version 0.10.0 alpha20
Ory Hydra	Version 0.10.0 alpha21
Ory Hydra	Version 0.10.0 alpha2
Ory Hydra	Version 0.10.0 alpha3
Ory Hydra	Version 0.10.0 alpha4
Ory Hydra	Version 0.10.0 alpha5
Ory Hydra	Version 0.10.0 alpha6
Ory Hydra	Version 0.10.0 alpha7
Ory Hydra	Version 0.10.0 alpha8
Ory Hydra	Version 0.10.0 alpha9
Ory Hydra	Version 0.10.10
Ory Hydra	Version 0.10.1
Ory Hydra	Version 0.10.2
Ory Hydra	Version 0.10.3
Ory Hydra	Version 0.10.4
Ory Hydra	Version 0.10.5
Ory Hydra	Version 0.10.6
Ory Hydra	Version 0.10.7
Ory Hydra	Version 0.10.8
Ory Hydra	Version 0.10.9
Ory Hydra	Version 0.11.0
Ory Hydra	Version 0.11.10
Ory Hydra	Version 0.11.12
Ory Hydra	Version 0.11.14
Ory Hydra	Version 0.11.1
Ory Hydra	Version 0.11.2
Ory Hydra	Version 0.11.3
Ory Hydra	Version 0.11.4
Ory Hydra	Version 0.11.6
Ory Hydra	Version 0.11.7
Ory Hydra	Version 0.11.9
Ory Hydra	Version 0.1 beta1
Ory Hydra	Version 0.1 beta2
Ory Hydra	Version 0.1 beta3
Ory Hydra	Version 0.1 beta4
Ory Hydra	Version 0.2.0
Ory Hydra	Version 0.3.0
Ory Hydra	Version 0.3.1
Ory Hydra	Version 0.4.0
Ory Hydra	Version 0.4.1
Ory Hydra	Version 0.4.2
Ory Hydra	Version 0.4.2 alpha1
Ory Hydra	Version 0.4.2 alpha2
Ory Hydra	Version 0.4.2 alpha3
Ory Hydra	Version 0.4.2 alpha4
Ory Hydra	Version 0.4.2 alpha
Ory Hydra	Version 0.4.3
Ory Hydra	Version 0.5.0
Ory Hydra	Version 0.5.1
Ory Hydra	Version 0.5.2
Ory Hydra	Version 0.5.3
Ory Hydra	Version 0.5.4
Ory Hydra	Version 0.5.5
Ory Hydra	Version 0.5.6
Ory Hydra	Version 0.5.7
Ory Hydra	Version 0.5.8
Ory Hydra	Version 0.6.0
Ory Hydra	Version 0.6.10
Ory Hydra	Version 0.6.1
Ory Hydra	Version 0.6.2
Ory Hydra	Version 0.6.3
Ory Hydra	Version 0.6.4
Ory Hydra	Version 0.6.5
Ory Hydra	Version 0.6.6
Ory Hydra	Version 0.6.7
Ory Hydra	Version 0.6.8
Ory Hydra	Version 0.6.9
Ory Hydra	Version 0.7.0
Ory Hydra	Version 0.7.10
Ory Hydra	Version 0.7.11
Ory Hydra	Version 0.7.12
Ory Hydra	Version 0.7.13
Ory Hydra	Version 0.7.1
Ory Hydra	Version 0.7.2
Ory Hydra	Version 0.7.3
Ory Hydra	Version 0.7.4
Ory Hydra	Version 0.7.5
Ory Hydra	Version 0.7.6
Ory Hydra	Version 0.7.7
Ory Hydra	Version 0.7.8
Ory Hydra	Version 0.7.9
Ory Hydra	Version 0.8.0
Ory Hydra	Version 0.8.1
Ory Hydra	Version 0.8.2
Ory Hydra	Version 0.8.3
Ory Hydra	Version 0.8.4
Ory Hydra	Version 0.8.5
Ory Hydra	Version 0.8.6
Ory Hydra	Version 0.8.7
Ory Hydra	Version 0.9.0
Ory Hydra	Version 0.9.10
Ory Hydra	Version 0.9.11
Ory Hydra	Version 0.9.12
Ory Hydra	Version 0.9.13
Ory Hydra	Version 0.9.14
Ory Hydra	Version 0.9.15
Ory Hydra	Version 0.9.16
Ory Hydra	Version 0.9.1
Ory Hydra	Version 0.9.2
Ory Hydra	Version 0.9.3
Ory Hydra	Version 0.9.4
Ory Hydra	Version 0.9.5
Ory Hydra	Version 0.9.6
Ory Hydra	Version 0.9.7
Ory Hydra	Version 0.9.8
Ory Hydra	Version 0.9.9
Ory Hydra	Version 1.0.0 beta1
Ory Hydra	Version 1.0.0 beta2
Ory Hydra	Version 1.0.0 beta3
Ory Hydra	Version 1.0.0 beta4
Ory Hydra	Version 1.0.0 beta5
Ory Hydra	Version 1.0.0 beta6
Ory Hydra	Version 1.0.0 beta7
Ory Hydra	Version 1.0.0 beta8
Ory Hydra	Version 1.0.0 beta9
Ory Hydra	Version 1.0.0 rc1
Ory Hydra	Version 1.0.0 rc2