com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0, <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=2.0.2) +81 more potentially affected by CVE-2022-34870 via org.apache.geode:geode-core (>=1.0.0-incubating.m2, <=1.15.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating.m2, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-m3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.1.0 - io.pivotal.services.datatx:gemfire-extensions-spring-security 1.0.0 and more Source cves: CVE-2022-34870 Source advisor...

com.antgroup.tugraph:calcite-geode (>=1.18.0-geaflow_1.0, <=1.18.0-geaflow_1.1), com.lightbend.akka:akka-stream-alpakka-geode_2.11 (>=0.10, <=2.0.2) +79 more potentially affected by CVE-2022-34870 via org.apache.geode:geode-core (>=1.0.0-incubating, <=1.15.0)

org.apache.geode:geode-core MAVEN version =1.0.0-incubating, =1.18.0-geaflow1.0, =0.10, =0.10, =1.1.0, =1.0-m3, =1.21.0.138, =0.3.12, =0.3.5, =0.1.9, =2.2.0, =1.0.0, =1.1.0 - io.pivotal.services.datatx:gemfire-extensions-spring-security 1.0.0 and more Source cves: CVE-2022-34870 Source advisory:...

CVE-2022-34870 Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application

Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting XSS via data injection when using Pulse web application to view Region entries...

CVE-2022-34870

CVE-2022-34870 : Concrete details from connected records show that Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using the Pulse web application to view Region entries. The underlying issue is described as an XSS in the Pulse data-inject...