Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
•added 2023/07/25 6:30 p.m.•43 views

Cross-site Scripting in healthcheck webconsole plugin

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS6AI score0.02247EPSS
SaveExploits0References6Affected Software1
vulnersOsv
vulnersOsv
•added 2023/07/25 6:30 p.m.•3 views

biz.netcentric.aem.ops.healthchecks.migration:hc-migration-felix-healthcheck-package (1.0.0) potentially affected by CVE-2023-38435 via org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin (2.0.0)

org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin and may be impacted: -...

6.1CVSS0.02247EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2023/07/25 6:30 p.m.•5 views

biz.netcentric.aem.ops.healthchecks.migration:hc-migration-felix-healthcheck-package (1.0.0) potentially affected by CVE-2023-38435 via org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin (2.0.0)

org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin and may be impacted: -...

6.1CVSS0.02247EPSS
SaveExploits0
osv_cve
osv_cve
•added 2023/07/25 4:15 p.m.•21 views

CVE-2023-38435

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS5.7AI score0.02247EPSS
SaveExploits0References3
vulnersOsv
vulnersOsv
•added 2023/07/25 3:40 p.m.•3 views

biz.netcentric.aem.ops.healthchecks.migration:hc-migration-felix-healthcheck-package (1.0.0) potentially affected by CVE-2023-38435 via org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin (2.0.0)

org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin and may be impacted: -...

6.1CVSS0.02247EPSS
SaveExploits0
Mend
Mend
•added 2023/07/25 3:40 p.m.•12 views

CVE-2023-38435

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS0.02247EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/07/25 12:00 a.m.•29 views

PT-2023-26420 · Apache · Apache Felix Healthcheck Webconsole Plugin

Name of the Vulnerable Software and Affected Versions: Apache Felix Healthcheck Webconsole Plugin versions 2.0.2 and prior Description: An improper neutralization of input during web page generation, also known as Cross-site Scripting, may allow an attacker to perform a reflected cross-site...

6.1CVSS5.9AI score0.02247EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/07/25 12:00 a.m.•8 views

CVE-2023-38435: Improper Neutralization of Input During Web Page Generation

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS6.2AI score0.02247EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/07/25 12:00 a.m.•26 views

Apache Felix Healthcheck Webconsole Plugin Cross-Site Scripting Vulnerability

Apache Felix Healthcheck Webconsole Plugin is a web console plugin from the Apache Foundation USA. A cross-site scripting vulnerability exists in Apache Felix Healthcheck Webconsole Plugin 2.0.2 and earlier versions, which stems from the presence of a reflected cross-site scripting XSS...

6.1CVSS5.8AI score0.02247EPSS
SaveExploits0References4
Rows per page
Query Builder