CVE-2021-32602

An improper neutralization of input during web page generation vulnerability CWE-79 in FortiPortal GUI 6.0.4 and below, 5.3.6 and below, 5.2.6 and below, 5.1.2 and below, 5.0.3 and below, 4.2.2 and below, 4.1.2 and below, 4.0.4 and below may allow a remote and unauthenticated attacker to perform ...

WS-2021-0173

In spring-framework, versions v3.0.0.M1 through v3.0.5.RELEASE are vulnerable to Cross-Site Scripting XSS, due to LocaleChangeInterceptor not escaping the Locale value from a user HTTP request...