Skip to content
OpenAdvisories
Medium · 6.1 CVE-2016-0712 EUVD-2022-4165GHSA-hj2v-85ph-8g48

Cross-site Scripting in Apache Jetspeed

Published Apr 11, 2016 · Updated Aug 5, 2024 · Assigned by redhat

Package: org.apache.portals.jetspeed-2:jetspeed Ecosystem: Maven

Description

Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven org.apache.portals.jetspeed-2:jetspeed < 2.3.1 2.3.1 GHSA-hj2v-85ph-8g48

References