CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Github Security Blog•added 2022/05/13 1:02 a.m.•38 views

Cross-site Scripting in Apache DeltaSpike

The Apache DeltaSpike-JSF 1.8.0 module has a XSS injection leak in the windowId handling. The default size of the windowId get's cut off after 10 characters by default, so the impact might be limited. A fix got applied and released in Apache deltaspike-1.8.1...

6.1CVSS6.2AI score0.04471EPSS

SaveExploits1References7Affected Software1

Prion•added 2018/01/04 3:29 p.m.•21 views

Cross site scripting

4.3CVSS6.1AI score0.04471EPSS

SaveExploits1References4Affected Software1

CVE•added 2018/01/04 3:00 p.m.•99 views

CVE-2017-17837

CVE-2017-17837 affects the Apache DeltaSpike-JSF 1.8.0 module with a Cross‑Site Scripting (XSS) leak in how windowId is handled. The windowId is truncated after 10 characters by default, which can limit impact but still constitutes an XSS risk. A fix was released in Apache DeltaSpike 1.8.1 (delta...

6.1CVSS6.1AI score0.04471EPSS

SaveExploits1References4Affected Software1

Rapid7 Vulnerability Database (full)•added 2018/01/04 12:00 a.m.•4 views

CVE-2017-17837: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.9AI score0.04471EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by