Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4pvw-g9fx-594r

Опубликовано: 25 июл. 2023
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Cross-site Scripting in healthcheck webconsole plugin

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack.

Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.

Пакеты

Наименование

org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin

maven
Затронутые версииВерсия исправления

< 2.1.0

2.1.0

EPSS

Процентиль: 79%
0.01205
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
больше 2 лет назад

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack. Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.

EPSS

Процентиль: 79%
0.01205
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79