---
id: 4136
title: "[CVE-2020-9437] SecureAuth Version 9.3"
cve: CVE-2020-9437
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/secureauth-version-9-3-advisory"
published_at: "2020-06-19T00:00:00Z"
tags: ["xss", "vulnerability", "advisory", "template-injection", "secureauth", "cve-2020-9437"]
phying_url: "https://phying.com/item/4136"
lang: en
---

# [CVE-2020-9437] SecureAuth Version 9.3

## Summary

A Bishop Fox advisory on CVE-2020-9437: AngularJS client-side template injection in SecureAuth 9.3 allows XSS payloads via usernames or emails during authentication, fixed in 9.3.0-17.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2020-9437
- **Published:** 2020-06-19T00:00:00Z
- **Original:** https://bishopfox.com/blog/secureauth-version-9-3-advisory
- **Phying News:** https://phying.com/item/4136