Not rated
CVE-2018-8035 This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising…
Description
This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Apache UIMA DUCC | Versions not published |
References
- uima.apache.org uima.apache.org
- 108195 www.securityfocus.com
- [uima-dev] 20190606 Re: upcoming board report lists.apache.org
Timeline
- Published
- Last modified