← Vulnerability feed

Vulnerability record · CVE-2020-1721 · published 30 April 2021

CVE-2020-1721: Dogtagpki cross-site scripting vulnerability

Dogtagpki · Dogtagpki

A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

6.1 CVSS 3.1 Medium EPSS 0.98% · top 39.3% CWE-79 · Cross-site scripting
6.1CVSS 3.1 base score, v2 4.3
0.98%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

A flaw was found in the Key Recovery Authority (KRA) Agent Service in pki-core 10.10.5 where it did not properly sanitize the recovery ID during a key recovery request, enabling a reflected cross-site scripting (XSS) vulnerability. An attacker could trick an authenticated victim into executing specially crafted Javascript code.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://bugzilla.redhat.com/show_bug.cgi?id=1777579 Issue TrackingPatchThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1777579 Issue TrackingPatchThird Party Advisory

Track CVE-2020-1721 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.1CVE-2021-20179Dogtagpki incorrect authorization vulnerabilityA flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and …EPSS 1.2%8.1CVE-2018-1080Dogtagpki improper access control vulnerabilityDogtag PKI, through version 10.6.1, has a vulnerability in AAclAuthz.java that, under certain configurations, causes the application of ACL allow and…EPSS 1.5%7.8CVE-2021-3551Dogtagpki cleartext storage of sensitive data vulnerabilityA flaw was found in the PKI-server, where the spkispawn command, when run in debug mode, stores admin credentials in the installation log file. This …EPSS 0.19%7.5CVE-2022-2414Dogtag PKI XML parser allows XXE file disclosureDogtag PKI parses XML documents with external entity resolution enabled, exposing it to XML external entity (XXE) attacks. A remote attacker can send…EPSS 86%analysed7.5CVE-2017-7537Redhat enterprise linux desktop hard-coded credentials vulnerabilityIt was found that a mock CMC authentication plugin with a hardcoded secret was accidentally enabled by default in the pki-core package before 10.6.4.…EPSS 1.5%6.8CVE-2020-15720Dogtagpki improper certificate validation vulnerabilityIn Dogtag PKI through 10.8.3, the pki.client.PKIConnection class did not enable python-requests certificate validation. Since the verify parameter wa…EPSS 1.0%6.1CVE-2020-25715Dogtagpki cross-site scripting vulnerabilityA flaw was found in pki-core 10.9.0. A specially crafted POST request can be used to reflect a DOM-based cross-site scripting (XSS) attack to inject …EPSS 1.1%6.1CVE-2019-10179Redhat enterprise linux cross-site scripting vulnerabilityA vulnerability was found in all pki-core 10.x.x versions, where the Key Recovery Authority (KRA) Agent Service did not properly sanitize recovery re…EPSS 0.94%

Source: NIST National Vulnerability Database (record CVE-2020-1721), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.