Description
OpenGrok 1.13.25 has a reflected Cross-Site Scripting (XSS) issue when producing the history view page. This happens through improper handling of path segments. The application reflects unsanitized user input into the HTML output.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Oracle | OpenGrok | 1.13.25 | — |
References
- Oracle Advisory vendor-advisory