Apache TomEE console vulnerable to Cross-site Scripting

🗓️ 14 May 2022 01:10:30Reported by GitHub Advisory DatabaseType

Apache TomEE console XSS vulnerabilit

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2018-8031	23 Jul 201822:29	–	nvd
OpenVAS	Apache TomEE console (tomee-webapp) XSS Vulnerability	31 Jul 201800:00	–	openvas
Veracode	Cross-site Scripting (XSS)	24 Jul 201802:28	–	veracode
Cvelist	CVE-2018-8031	23 Jul 201822:00	–	cvelist
OSV	CVE-2018-8031	23 Jul 201822:29	–	osv
OSV	Apache TomEE console vulnerable to Cross-site Scripting	14 May 202201:30	–	osv
Prion	Design/Logic Flaw	23 Jul 201822:29	–	prion
CVE	CVE-2018-8031	23 Jul 201822:29	–	cve

Vulners

Node

org.apache.tomee tomee\-webappRange<7.0.5

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-8031
lists	www.lists.apache.org/thread.html/c4b0d83a534d6cdf2de54dbbd00e3538072ac2e360781b784608ed0d@%3Cdev.tomee.apache.org%3E
github	www.github.com/apache/tomee/commit/b8bbf50c23ce97dd64f3a5d77f78f84e47579863
github	www.github.com/advisories/GHSA-fg44-w3fr-hgxv

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 May 2022 01:30Current

1.1Low risk

Vulners AI Score1.1

CVSS24.3

CVSS36.1

EPSS0.002

CWE-79