Lucene search

K
osvGoogleOSV:GHSA-M3P9-C7P3-XXMP
HistoryMay 17, 2022 - 2:17 a.m.

Mayaa Cross-site Scripting vulnerability

2022-05-1702:17:15
Google
osv.dev
6

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the default error page for the org.seasar.mayaa.impl.engine.PageNotFoundException exception and possibly other exceptions.

6 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.4%

Related for OSV:GHSA-M3P9-C7P3-XXMP