Lucene search
GoogleOSV:GHSA-JG6J-JRXV-2HH9HistoryJan 08, 2022 - 12:46 a.m.
Cross-site Scripting in Apache Pluto
2022-01-0800:46:17
Google
osv.dev
8
apache pluto
cross-site scripting
xss attacks
jsp version
apache pluto applicant mvcbean cdi portlet
version 3.1.1
EPSS
0.002
Percentile
57.4%
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
Related
nvd
nvd
CVE-2021-36738
2022-01-06 09:15:07
github
github
Cross-site Scripting in Apache Pluto
2022-01-08 00:46:17
cvelist
cvelist
cve
cve
CVE-2021-36738
2022-01-06 09:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-01-07 03:41:30
cnvd
cnvd
Apache Pluto Cross-Site Scripting Vulnerability (CNVD-2022-04997)
2022-01-10 00:00:00
prion
prion
Cross site scripting
2022-01-06 09:15:00