Description
Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.
Remediation
References
https://github.com/Contrast-Security-OSS/Burptrast/tree/main/docs/CVE-2023-33725
Related Vulnerabilities
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa-nifi-parent
CVE-2023-1370 Vulnerability in maven package net.minidev:json-smart
CVE-2021-21307 Vulnerability in maven package org.lucee:lucee
CVE-2020-10992 Vulnerability in maven package com.linkedin.azkaban:azkaban-common
CVE-2020-11113 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind