Cross-site Scripting (XSS)

util-varexport is vulnerable to cross-site scripting. The vulnerability exists in the multiple functions of ViewExportedVariablesServlet.java as it does not properly escape the n-gram indexes in JSON before being rendered, allowing an attacker to inject and execute malicious JavaScript...

CVE-2020-36634 Indeed Engineering util ViewExportedVariablesServlet.java appendTo cross site scripting

A vulnerability classified as problematic has been found in Indeed Engineering util up to 1.0.33. Affected is the function visit/appendTo of the file varexport/src/main/java/com/indeed/util/varexport/servlet/ViewExportedVariablesServlet.java. The manipulation leads to cross site scripting. It is...