Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:35617
HistoryMay 20, 2022 - 3:46 a.m.

Cross-site Scripting (XSS)

2022-05-2003:46:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16

0.001 Low

EPSS

Percentile

30.2%

para-core is vulnerable to cross-site scripting. The vulnerability exists because the compileMustache function of Utils.java does not properly escape the HTML when compiling mustache templates, allowing an attacker to inject and execute malicious javascript.

0.001 Low

EPSS

Percentile

30.2%