Unscored CVE-2014-0149 EUVD-2014-0208GHSA-mp35-7mg4-6p8r

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web…

Published May 5, 2014 · Updated Aug 6, 2024 · Assigned by redhat

Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.

References

RHSA-2014:0462 vendor-advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1078646