CVE-2021-36738
XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
Productos afectados
Apache Software Foundation · Apache Portals¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →