org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3, <=2.1.4) +35 more potentially affected by CVE-2022-32533 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3, <=2.3.1)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.1 and more Source cves: CVE-2022-32533 Source advisory: OSV:GHSA-H975-R69H-4W9P...

CVE-2022-32533 Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no...

CVE-2022-32533 Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:jetspeed-archetype (>=2.2.1, <=2.3.0) +1 more potentially affected by CVE-2016-0709 via org.apache.portals.jetspeed-2:jetspeed (>=2.1.3, <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed MAVEN version =2.1.3, =2.1.3, =2.2.1, =2.2.2, =2.3.0 Source cves: CVE-2016-0709 Source advisory: OSV:GHSA-W47P-5Q88-HJ5G...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3, <=2.1.4) +35 more potentially affected by CVE-2016-0711 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3, <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.0 and more Source cves: CVE-2016-0711 Source advisory: GHSA-5PGM-9G57-3WC7...

org.apache.portals.jetspeed-2:app-servers (>=2.1.3, <=2.1.4), org.apache.portals.jetspeed-2:applications (>=2.1.3, <=2.1.4) +35 more potentially affected by CVE-2016-0711 via org.apache.portals.jetspeed-2:jetspeed-commons (>=2.1.3, <=2.3.0)

org.apache.portals.jetspeed-2:jetspeed-commons MAVEN version =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.2.1, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.1.3, =2.3.0 and more Source cves: CVE-2016-0711 Source advisory: MEND:CVE-2016-0711...