US EditionPublished • loading... • Updated
CISA’s Secure-Software Buying Tool Had a Simple XSS Vulnerability of Its Own
Summary by CyberScoop
2 Articles
2 Articles
CISA’s secure-software buying tool had a simple XSS vulnerability of its own
A Cybersecurity and Infrastructure Security Agency tool dedicated to helping government agencies buy secure software turned out to have a cybersecurity vulnerability of its own. Jeff Williams, the former leader of the Open Worldwide Application Security Project (OWASP), told CyberScoop that he discovered a cross-site scripting vulnerability in CISA’s “Software Acquisition Guide: Supplier Response Web Tool” and reported it to CISA in September, b…
Coverage Details
Total News Sources2
Leaning Left0Leaning Right0Center1Last UpdatedBias Distribution100% Center
Bias Distribution
- 100% of the sources are Center
100% Center
C 100%
Factuality
To view factuality data please Upgrade to Premium
