Apache Portals

3 results · Clear filters · Feed

• Medium 6.1
  CVE-2021-36739

  XSS vulnerability in the MVCBean JSP portlet maven archetype

  The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

  Apache Software Foundation Apache Portals org.apache.portals.pluto:pluto-portal Maven
  Jan 6, 2022
• Medium —
  CVE-2021-36738

  XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet

  The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact

  Apache Software Foundation Apache Portals org.apache.portals.pluto:pluto-portal Maven
  Jan 6, 2022
• Medium —
  CVE-2021-36737

  XSS in V3 Demo Portlet

  The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact

  Apache Software Foundation Apache Portals org.apache.portals.pluto:pluto-portal Maven
  Jan 6, 2022