Description

Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://www.gwtproject.org/release-notes.html#Release_Notes_2_5_1_RC1

http://www.openwall.com/lists/oss-security/2013/08/05/1

http://www.openwall.com/lists/oss-security/2013/08/05/3

http://www.securityfocus.com/bid/61590

Related Vulnerabilities

CVE-2023-30547 Vulnerability in npm package vm2

CVE-2020-35149 Vulnerability in maven package org.webjars.npm:mquery

CVE-2015-3269 Vulnerability in maven package org.apache.flex.blazeds:flex-messaging-core

CVE-2023-48309 Vulnerability in npm package next-auth

CVE-2021-32640 Vulnerability in npm package ws

Severity

Critical

Classification

CWE-79

Tags

Patch