GHSA-4c37-7m5h-c8m9
Suggest an improvement- Source
- https://github.com/advisories/GHSA-4c37-7m5h-c8m9
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-4c37-7m5h-c8m9/GHSA-4c37-7m5h-c8m9.json
- JSON Data
- https://api.osv.dev/v1/vulns/GHSA-4c37-7m5h-c8m9
- Aliases
- Published
- 2025-02-10T12:30:45Z
- Modified
- 2025-02-10T18:42:16Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- Apache Felix Webconsole: XSS in services console
- Details
-
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole.
This issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8.
Users are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issue.
- Database specific
{ "cwe_ids": [ "CWE-79" ], "github_reviewed": true, "github_reviewed_at": "2025-02-10T18:08:47Z", "nvd_published_at": "2025-02-10T12:15:29Z", "severity": "MODERATE" }- References
Affected packages
Maven / org.apache.felix:org.apache.felix.webconsole
Package
- Name
- org.apache.felix:org.apache.felix.webconsole
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.felix/org.apache.felix.webconsole
Maven / org.apache.felix:org.apache.felix.webconsole
Package
- Name
- org.apache.felix:org.apache.felix.webconsole
- View open source insights on deps.dev
- Purl
- pkg:maven/org.apache.felix/org.apache.felix.webconsole