GHSA-96jq-75wh-2658

Source

https://github.com/advisories/GHSA-96jq-75wh-2658

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2018/10/GHSA-96jq-75wh-2658/GHSA-96jq-75wh-2658.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-96jq-75wh-2658

Aliases

CVE-2018-8032

Published

2018-10-16T20:51:15Z

Modified

2024-06-25T02:34:38.958612Z

Severity

6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator

Summary

Moderate severity vulnerability that affects apache axis

Details

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.

Database specific

{
    "nvd_published_at": "2018-08-02T13:29:00Z",
    "cwe_ids": [
        "CWE-79"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2020-06-16T21:27:45Z"
}

References

Affected packages

Maven / org.apache.axis:axis

Package

Name: org.apache.axis:axis; View open source insights on deps.dev
Purl: pkg:maven/org.apache.axis/axis

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.4

Affected versions

1.*

1.4

Maven / axis:axis

Package

Name: axis:axis; View open source insights on deps.dev
Purl: pkg:maven/axis/axis

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

1.4

Affected versions

1.*

1.0

1.1-beta

1.1

1.2-alpha-1

1.2-beta-2

1.2-beta-3

1.2-RC1

1.2-RC2

1.2-RC3

1.2

1.2.1

1.3

1.4