Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2026/07/30 5:29 a.m.44 views

CVE-2026-59328 Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips

Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser SWT Browser with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded...

4.2CVSS0.00162EPSS
SaveExploits0References1
Spring Security Advisories
Spring Security Advisories
added 2026/07/29 12:0 a.m.10 views

cve-2026-59328 - MEDIUM - CVE-2026-59328: Cross-Site Scripting in Eclipse Spring Boot Starter Wizard Dependency Tooltips

Spring Tools for Eclipse renders Spring Boot starter wizard dependency tooltips in a native embedded browser SWT Browser with JavaScript enabled. Using untrusted and compromised Initializr endpoints for the Spring Boot starter wizard can result in arbitrary script execution inside the embedded...

4.2CVSS6.2AI score0.00162EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder