2 matches found
CVE-2026-35565
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
5.4CVSS5.6AI score0.00466EPSS
SaveExploits0References6
CVE-2026-35565: Improper Neutralization of Input During Web Page Generation
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
5.4CVSS5.7AI score0.00466EPSS
SaveExploits0References2
20