25 matches found
CVE-2020-21266
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...
CVE-2020-21266
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...
CVE-2020-21266
CVE-2020-21266 affects Broadleaf Commerce 5.1.14-GA and is caused by a slow HTTP POST that enables cross-site scripting (XSS) on the client. The impact is client-side script execution. A fix is referenced in Broadleaf release notes for 5.1.15-GA; upgrading to that version is the supported remedia...
PT-2020-15335
Name of the Vulnerable Software and Affected Versions Broadleaf Commerce version 5.1.14-GA Description The issue is related to cross-site scripting XSS due to a slow HTTP post vulnerability. Recommendations For version 5.1.14-GA, update to a version that includes a fix for this issue, as no...
CVE-2020-21266: Improper Neutralization of Input During Web Page Generation
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting XSS due to a slow HTTP post vulnerability...