Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vm59-329q-p468

Опубликовано: 14 мая 2019
Источник: github
Github: Прошло ревью
CVSS3: 6.1

Описание

Cross-site Scripting in Apache UIMA

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

Пакеты

Наименование

org.apache.uima:uima-ducc-web

maven
Затронутые версииВерсия исправления

<= 2.2.2

3.0.0

EPSS

Процентиль: 88%
0.03823
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
ubuntu
почти 7 лет назад

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

CVSS3: 6.1
nvd
почти 7 лет назад

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

EPSS

Процентиль: 88%
0.03823
Низкий

6.1 Medium

CVSS3

Дефекты

CWE-79