Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2023/07/25 6:30 p.m.19 views

Cross-site Scripting in healthcheck webconsole plugin

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS6AI score0.01368EPSS
Exploits0References6Affected Software1
vulnersOsv
vulnersOsv
added 2023/07/25 6:30 p.m.2 views

biz.netcentric.aem.ops.healthchecks.migration:hc-migration-felix-healthcheck-package (=1.0.0) potentially affected by CVE-2023-38435 via org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin (=2.0.0)

org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin MAVEN version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.felix:org.apache.felix.healthcheck.webconsoleplugin and may be impacted: -...

6.1CVSS6.3AI score0.01368EPSS
Exploits0
OSV
OSV
added 2023/07/25 4:15 p.m.1 views

CVE-2023-38435

An improper neutralization of input during web page generation 'Cross-site Scripting' CWE-79 vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting XSS attack. Upgrade to Apache Felix Healthcheck...

6.1CVSS5.7AI score
Exploits0References3
Positive Technologies
Positive Technologies
added 2023/07/25 12:0 a.m.2 views

PT-2023-26420 · Apache · Apache Felix Healthcheck Webconsole Plugin

Name of the Vulnerable Software and Affected Versions: Apache Felix Healthcheck Webconsole Plugin versions 2.0.2 and prior Description: An improper neutralization of input during web page generation, also known as Cross-site Scripting, may allow an attacker to perform a reflected cross-site...

6.1CVSS5.9AI score0.01368EPSS
Exploits0References9
CNNVD
CNNVD
added 2023/07/25 12:0 a.m.1 views

Apache Felix Healthcheck Webconsole Plugin 跨站脚本漏洞

Apache Felix Healthcheck Webconsole Plugin is a web console plugin from the Apache Foundation USA. A cross-site scripting vulnerability exists in Apache Felix Healthcheck Webconsole Plugin 2.0.2 and earlier versions, which stems from the presence of a reflected cross-site scripting XSS...

6.1CVSS5.8AI score0.01368EPSS
Exploits0References4
Rows per page
Query Builder