Lucene search
Veracode Vulnerability DatabaseVERACODE:36283HistoryJul 07, 2022 - 4:39 a.m.
Cross-site Scripting (XSS)
2022-07-0704:39:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.011 Low
EPSS
Percentile
84.2%
jetspeed-portal is vulnerable to cross-site scripting. The vulnerability exists because the library does not properly filter the untrusted user inputs by default, allowing an attacker to inject and execute malicious javascript
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetspeed-2 portal components | le | 2.3.1 | |
| jetspeed-2 portal components | le | 2.3.1 |
Related
prion
prion
Design/Logic Flaw
2022-07-06 10:15:00
nvd
nvd
CVE-2022-32533
2022-07-06 10:15:09
github
github
Insufficient user input in Apache Jetspeed-2
2022-07-07 00:00:28
cve
cve
CVE-2022-32533
2022-07-06 10:15:09
cvelist
cvelist
CVE-2022-32533 Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues
2022-07-06 09:40:12
cnvd
cnvd
Apache Jetspeed-2 Input Validation Error Vulnerability
2022-07-08 00:00:00
osv
osv
Insufficient user input in Apache Jetspeed-2
2022-07-07 00:00:28