Lucene search
ApacheCVELIST:CVE-2021-36737HistoryJan 06, 2022 - 8:50 a.m.
CVE-2021-36737 XSS in V3 Demo Portlet
2022-01-0608:50:13
CWE-79
apache
www.cve.org
3
cve-2021-36737
cross-site scripting
apache pluto
v3-demo-portlet.war
EPSS
0.002
Percentile
57.4%
The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
CNA Affected
[
{
"product": "Apache Portals",
"vendor": "Apache Software Foundation",
"versions": [
{
"status": "affected",
"version": "org.apache.portals.pluto:PortletV3Demo 3.0.0"
},
{
"status": "affected",
"version": "org.apache.portals.pluto:PortletV3Demo 3.0.1"
},
{
"status": "affected",
"version": "org.apache.portals.pluto.demo:v3-demo-portlet 3.1.0"
}
]
}
]Related
nvd
nvd
CVE-2021-36737
2022-01-06 09:15:07
osv
osv
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:20
cve
cve
CVE-2021-36737
2022-01-06 09:15:07
cnvd
cnvd
Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-02486)
2022-01-10 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-01-07 10:36:43
github
github
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:20
prion
prion
Cross site scripting
2022-01-06 09:15:00