AZL-108014
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-108014.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-108014
- Upstream
- Published
- 2026-10-06T20:17:15Z
- Modified
- 2026-10-15T05:32:31Z
- Summary
- CVE-2026-105111 affecting package bcel 5.2-37
- Details
-
Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Commons BCEL.
This only happens when you're using Class2HTML to generate webpages for possibly-attacker-controlled class files, where Class2HTML emitters write attacker class-file strings into HTML unescaped (stored XSS in reports).
This issue affects Apache Commons BCEL: before 6.13.0.
Users are recommended to upgrade to version 6.13.0, which fixes the issue.
- References