Description
Cross-site scripting (XSS) vulnerability in Business Process Editor in Red Hat JBoss BPM Suite before 6.3.3 allows remote authenticated users to inject arbitrary web script or HTML by levering permission to create business processes.
Remediation
References
http://rhn.redhat.com/errata/RHSA-2016-1968.html
http://rhn.redhat.com/errata/RHSA-2016-1969.html
http://www.securityfocus.com/bid/93219
https://bugzilla.redhat.com/show_bug.cgi?id=1358523
Related Vulnerabilities
CVE-2014-4611 Vulnerability in maven package net.jpountz.lz4:lz4
CVE-2018-11804 Vulnerability in maven package org.apache.spark:spark-core_2.11
CVE-2017-2598 Vulnerability in maven package org.jenkins-ci.main:jenkins-core
CVE-2014-4671 Vulnerability in npm package hapi
CVE-2023-36478 Vulnerability in maven package org.eclipse.jetty:jetty-http