Fiserv · Fiserv Accurate Reconciliation · CVE-2020-8952
**Name of the Vulnerable Software and Affected Versions**
Fiserv Accurate Reconciliation versions prior to 3.0.0
**Description**
The issue allows for cross-site scripting (XSS) attacks via the `timeOut` parameter in the `logout.jsp` endpoint. This could potentially lead to malicious script execution on the client-side.
**Recommendations**
For versions prior to 3.0.0, update to version 3.0.0 or higher to resolve the issue. As a temporary workaround, consider restricting access to the `logout.jsp` endpoint or avoiding the use of the `timeOut` parameter until the update is applied.