CVE-2019-12416

2020-03-1914:48:52

apache

www.cve.org

EPSS

0.002

Percentile

54.9%

JSON

we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.

CNA Affected

[
  {
    "product": "Apache DeltaSpike",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Apache DeltaSpike up to including 1.9.2"
      }
    ]
  }
]