Lucene search

K
osvGoogleOSV:GHSA-HJ2V-85PH-8G48
HistoryMay 17, 2022 - 3:56 a.m.

Cross-site Scripting in Apache Jetspeed

2022-05-1703:56:48
Google
osv.dev
6

0.095 Low

EPSS

Percentile

94.8%

Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.

0.095 Low

EPSS

Percentile

94.8%