Описание
Apache Geode vulnerable to Cross-Site Scripting
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
Пакеты
Наименование
org.apache.geode:geode-core
maven
Затронутые версииВерсия исправления
< 1.15.1
1.15.1
Связанные уязвимости
CVSS3: 5.4
nvd
больше 3 лет назад
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.