Lucene search
+L

2 matches found

OSV
OSV
added 2026/04/13 12:31 p.m.9 views

GHSA-F2HP-QW27-8WFQ Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata

Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/13 12:31 p.m.8 views

EUVD-2026-21904

Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...

5.4CVSS5.9AI score0.00466EPSS
SaveExploits0References3
Rows per page
Query Builder