Beveiligingsadvies

CVE-2022-32533

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-07-06 09:40:12

Laatst bijgewerkt 2024-08-03 07:46:43

Toegewezen door apache

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no updates will be provided for this issue

← Alle CVE's bekijken Bekijk op cve.org ↗