Skip to content
OpenAdvisories

Vendor

Wren Security

1 known vulnerabilities.

Products

wrensec-commons 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-2102

    XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter

    wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse() method used the _mimeType request parameter to set the Content-Type response header without proper sanitizatio…

    Wren Security wrensec-commons