2 matches found
UBUNTU-CVE-2013-6430
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...
5.4CVSS6.7AI score0.01774EPSS
SaveExploits0References3
Framework: org.spring.web.util.JavaScriptUtils.javaScriptEscape insufficient escaping of characters
The JavaScriptUtils.javaScriptEscape method in web/util/JavaScriptUtils.java in Spring MVC in Spring Framework before 3.2.2 does not properly escape certain characters, which allows remote attackers to conduct cross-site scripting XSS attacks via a 1 line separator or 2 paragraph separator Unicod...
5.4CVSS5.7AI score0.01774EPSS
SaveExploits0References5
20