CVE-2022-34870
Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application
Résumé
Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- web lists.apache.org
- web openwall.com