Non notée
CVE-2019-0186 The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting…
Description
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Apache Pluto 3.0 | 3.0.0 → 3.0.1 | Pas de correctif indiqué |
Références
- portals.apache.org portals.apache.org
- [CVE-2019-0186] The input fields of the Chat Room demo are vulnerable to Cross-Site Scripting (XSS) attacks mail-archives.apache.org
- [CVE-2019-0186] The input fields of the Chat Room demo are vulnerable to Cross-Site Scripting (XSS) attacks www.openwall.com
- [CVE-2019-0186] The input fields of the Chat Room demo are vulnerable to Cross-Site Scripting (XSS) attacks lists.apache.org
- 46759 www.exploit-db.com
- packetstormsecurity.com packetstormsecurity.com
- 108091 www.securityfocus.com
Chronologie
- Publiée
- Dernière modification