CVE-2020-21266

2020-10-2914:15:12

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

JSON

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.

CPENameOperatorVersion
broadleafcommerceeqbroadleaf-4.0.21-GA
broadleafcommerceeqbroadleaf-4.0.0-RC2
broadleafcommerceeqbroadleaf-5.1.3-GA
broadleafcommerceeqbroadleaf-4.0.6-GA
broadleafcommerceeqbroadleaf-3.1.0-M2-3
broadleafcommerceeqbroadleaf-4.0.21-PERF7
broadleafcommerceeqbroadleaf-4.1.0-GA
broadleafcommerceeqbroadleaf-3.0.15-GA
broadleafcommerceeqbroadleaf-4.0.20-GA
broadleafcommerceeqbroadleaf-5.0.5-GA

Name	Operator	Version
broadleafcommerce	eq	broadleaf-4.0.21-GA
broadleafcommerce	eq	broadleaf-4.0.0-RC2
broadleafcommerce	eq	broadleaf-5.1.3-GA
broadleafcommerce	eq	broadleaf-4.0.6-GA
broadleafcommerce	eq	broadleaf-3.1.0-M2-3
broadleafcommerce	eq	broadleaf-4.0.21-PERF7
broadleafcommerce	eq	broadleaf-4.1.0-GA
broadleafcommerce	eq	broadleaf-3.0.15-GA
broadleafcommerce	eq	broadleaf-4.0.20-GA
broadleafcommerce	eq	broadleaf-5.0.5-GA