CVE-2022-34870 Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application

2022-10-2500:00:00

apache

www.cve.org

apache geode

xss

data injection

pulse web app

vulnerability

0.001 Low

EPSS

Percentile

26.6%

JSON

Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.

CNA Affected

[
  {
    "vendor": "Apache Software Foundation",
    "product": "Apache Geode",
    "versions": [
      {
        "version": "Apache Geode",
        "status": "affected",
        "lessThanOrEqual": "1.15.0",
        "versionType": "custom"
      }
    ]
  }
]