34 matches found
CVE-2022-34914
Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The clientIp variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary valu...
PT-2022-22433
Name of the Vulnerable Software and Affected Versions Webswing versions prior to 20.1.16 Webswing versions prior to 20.2.19 Webswing versions prior to 21.1.8 Webswing versions prior to 21.2.12 Webswing versions prior to 22.1.3 Description The issue allows X-Forwarded-For header injection. The...
Webswing 注入漏洞
Webswing is a specialized web server from Webswing, Inc. for running Java Swing and JavaFX based applications in a web browser. A security vulnerability exists in Webswing versions prior to 22.1.3 that stems from allowing X-Forwarded-For header injection...
CVE-2022-34914: Improper Neutralization of Special Elements in Output Used by a Downstream Component
Webswing before 22.1.3 allows X-Forwarded-For header injection. The client IP address is associated with a variable in the configuration page. The clientIp variable can be used as an application startup argument. The X-Forwarded-For header can be manipulated by a client to store an arbitrary valu...
Webswing Remote Code Execution Vulnerability
Webswing is a web server that lets you run any swing application in a web browser using only pure HTML5. A remote code execution vulnerability exists in JsLink in Webswing that can be exploited by an attacker to execute code in the server...
CVE-2020-11103
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution...
CVE-2020-11103
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution...
Remote code execution
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution...
CVE-2020-11103
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution...
CVE-2020-11103
CVE-2020-11103 affects Webswing (JsLink) and allows remote code execution via the JsLink mechanism in Webswing versions before 2.6.12 LTS, and 2.7.x and 20.x before 20.1. The vulnerability is documented across multiple sources (NVD entry CVE-2020-11103, Red Hat advisory, CNVD, and others) with ne...
CVE-2020-11103
JsLink in Webswing before 2.6.12 LTS, and 2.7.x and 20.x before 20.1, allows remote code execution...
Webswing Jslink 代码注入漏洞
Webswing is a web server that lets you run any swing application in a web browser using only pure HTML5. A remote code execution vulnerability exists in JsLink in Webswing that can be exploited by an attacker to execute code in the server...
PT-2020-12550
Name of the Vulnerable Software and Affected Versions Webswing versions prior to 2.6.12 LTS Webswing versions 2.7.x Webswing versions 20.x prior to 20.1 Description JsLink in Webswing allows remote code execution. Recommendations For Webswing versions prior to 2.6.12 LTS, update to version 2.6.12...