1 matches found
CVE-2026-35565: Improper Neutralization of Input During Web Page Generation
Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...
5.4CVSS5.8AI score0.00592EPSS
SaveExploits0References2
20