CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

CVE-2020-21266

CVE-2020-21266 affects Broadleaf Commerce 5.1.14-GA and is caused by a slow HTTP POST that enables cross-site scripting (XSS) on the client. The impact is client-side script execution. A fix is referenced in Broadleaf release notes for 5.1.15-GA; upgrading to that version is the supported remedia...

CVE-2020-21266

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...

PT-2020-15335

Name of the Vulnerable Software and Affected Versions Broadleaf Commerce version 5.1.14-GA Description The issue is related to cross-site scripting XSS due to a slow HTTP post vulnerability. Recommendations For version 5.1.14-GA, update to a version that includes a fix for this issue, as no...

CVE-2020-21266: Improper Neutralization of Input During Web Page Generation

Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...