Package · Maven

org.apache.portals.jetspeed-2:jetspeed-commons

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2022-32533

Apache Portals Jetspeed XSS, CSRF, SSRF, and XXE issues

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a do…

Apache Software Foundation Apache Portals org.apache.portals.jetspeed-2:jetspeed-commons Maven

Jul 6, 2022
Medium 6.1

CVE-2016-0711

Apache Jetspeed vulnerable to Cross-site Scripting

Multiple cross-site scripting (XSS) vulnerabilities in Apache Jetspeed before 2.3.1 allow remote attackers to inject arbitrary web script or HTML via the title parameter when adding a (1) link, (2) page, or (3) folder resource.

org.apache.portals.jetspeed-2:jetspeed-commons Maven

Apr 11, 2016