GHSA-vm59-329q-p468MediumCVSS 6.1

Cross-site Scripting in Apache UIMA

Published
May 14, 2019
Last Modified
May 22, 2023

🔗 CVE IDs covered (1)

CVE-2018-8035 →

📋 Description

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

🎯 Affected products1

  • maven/org.apache.uima:uima-ducc-web:<= 2.2.2

🔗 References (5)