CVE-2021-36738
XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
Produtos afetados
Apache Software Foundation · Apache PortalsQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →