Lucene search
Veracode Vulnerability DatabaseVERACODE:18673HistoryMay 03, 2019 - 6:43 a.m.
Cross-site Scripting (XSS)
2019-05-0306:43:04
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
1
0.078 Low
EPSS
Percentile
94.2%
Apache Pluto Portal is vulnerable to cross-site scripting (XSS) attack. The input fields to construct a resource URL of the Chat Room are not sanitized properly, allowing an attacker to inject arbitrary script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| chatroomdemo | le | 3.0.1 |
Related
cve
cve
CVE-2019-0186
2019-04-26 16:29:00
packetstorm
packetstorm
Apache Pluto 3.0.0 / 3.0.1 Cross Site Scripting
2019-04-26 00:00:00
prion
prion
Cross site scripting
2019-04-26 16:29:00
zdt
zdt
Apache Pluto 3.0.0 / 3.0.1 - Persistent Cross-Site Scripting Vulnerability
2019-04-26 00:00:00
exploitpack
exploitpack
Apache Pluto 3.0.0 3.0.1 - Persistent Cross-Site Scripting
2019-04-26 00:00:00
osv
osv
Cross-site Scripting in Apache Pluto Chatroom demo
2022-05-24 16:44:43
cvelist
cvelist
CVE-2019-0186
2019-04-26 15:56:48
checkpoint_advisories
checkpoint_advisories
nvd
nvd
CVE-2019-0186
2019-04-26 16:29:00
github
github
Cross-site Scripting in Apache Pluto Chatroom demo
2022-05-24 16:44:43
exploitdb
exploitdb
Apache Pluto 3.0.0 / 3.0.1 - Persistent Cross-Site Scripting
2019-04-26 00:00:00