Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2014-0462.html

https://bugzilla.redhat.com/show_bug.cgi?id=1078646

Related Vulnerabilities

CVE-2011-4367 Vulnerability in maven package org.apache.myfaces.core:myfaces-impl

CVE-2019-16543 Vulnerability in maven package com.inflectra.spiratest.plugins:inflectra-spira-integration

CVE-2020-1950 Vulnerability in maven package org.apache.tika:tika-parsers

CVE-2022-45921 Vulnerability in maven package io.fusionauth:fusionauth-java-client

CVE-2017-12621 Vulnerability in maven package commons-jelly:commons-jelly

Severity

Critical

Tags

Vendor Advisory CWE-79