org.apache.portals.pluto:pluto-portal

Maven3 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting org.apache.portals.pluto:pluto-portalpage 1 of 1

CVE-2021-36737MEDIUMCVSS 6.1EG 6.1✓ Fixed in 3.1.1
2022-01-06
vulnerable: 2.0.0 ... 3.1.0 (10 versions)
The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
CVE-2021-36738MEDIUMCVSS 6.1EG 6.1✓ Fixed in 3.1.1
2022-01-06
vulnerable: 2.0.0 ... 3.1.0 (10 versions)
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
CVE-2021-36739MEDIUMCVSS 6.1EG 6.1✓ Fixed in 3.1.1
2022-01-06
vulnerable: 2.0.0 ... 3.1.0 (10 versions)
The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

Check whether org.apache.portals.pluto:pluto-portal is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for org.apache.portals.pluto:pluto-portal CVEs against the assets you own.

Start Free Scan →