Lucene search
PRIOn knowledge basePRION:CVE-2023-38435HistoryJul 25, 2023 - 4:15 p.m.
Cross site scripting
2023-07-2516:15:00
PRIOn knowledge base
www.prio-n.com
3
cross-site scripting
input neutralization
web page generation
apache felix
reflected xss
upgrade
nvd
cwe-79
0.006 Low
EPSS
Percentile
77.9%
An improper neutralization of input during web page generation (‘Cross-site Scripting’) [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack.
Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.
| CPE | Name | Operator | Version |
|---|---|---|---|
| felix_health_check_webconsole_plugin | lt | 2.1.0 |
Related
cve
cve
CVE-2023-38435
2023-07-25 16:15:11
veracode
veracode
Cross-Site Scripting (XSS)
2023-07-26 10:47:47
nvd
nvd
CVE-2023-38435
2023-07-25 16:15:11
cvelist
cvelist
github
github
Cross-site Scripting in healthcheck webconsole plugin
2023-07-25 18:30:32
osv
osv
Cross-site Scripting in healthcheck webconsole plugin
2023-07-25 18:30:32