CVE-2019-10085

2019-06-1823:07:22

apache

www.cve.org

EPSS

0.002

Percentile

59.4%

JSON

In Apache Allura prior to 1.11.0, a vulnerability exists for stored XSS on the user dropdown selector when creating or editing tickets. The XSS executes when a user engages with that dropdown on that page.

CNA Affected

[
  {
    "product": "Apache Allura",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache Allura prior to 1.11.0"
      }
    ]
  }
]