GHSA-2cv6-4f2r-jq2cMediumCVSS 5.6

Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Published
March 12, 2025
Last Modified
March 21, 2025

🔗 CVE IDs covered (1)

CVE-2025-27867 →

📋 Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin.

This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0.

Users are recommended to upgrade to version 1.2.2, which fixes the issue.

🎯 Affected products1

  • maven/org.apache.felix:org.apache.felix.http.webconsoleplugin:< 1.2.2

🔗 References (4)