7 matches found
CVE-2026-2102
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...
CVE-2026-2102
The wrensec-commons library contains a reflected cross-site scripting (XSS) vulnerability within the CREST framework's HTTP binding. The root cause is located in the HttpUtils.prepareResponse() method, which fails to properly sanitize the _mimeType request parameter when setting the Content-Type ...
CVE-2026-2102 XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...
CVE-2026-2102 XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...
EUVD-2026-115250
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...
PT-2026-135490
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...
CVE-2026-2102: Wren Security wrensec-commons: wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding
wrensec-commons contains a reflected cross-site scripting XSS vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse method used the mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET request with...