What is GHSA-x588-g38j-f672?

GHSA-x588-g38j-f672 is a security advisory published by GitHub Security Advisories with Medium severity. Cross-site Scripting in Apache Pluto

Which CVE IDs does GHSA-x588-g38j-f672 cover?

GHSA-x588-g38j-f672 covers the following CVE IDs: CVE-2021-36737. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-x588-g38j-f672?

GHSA-x588-g38j-f672 affects 1 product, including: maven/org.apache.portals.pluto:pluto-portal:\u003c 3.1.1.

GHSA-x588-g38j-f672Medium

Cross-site Scripting in Apache Pluto

Vendor

GitHub Security Advisories

Published

January 8, 2022

Last Modified

February 3, 2023

🔗 CVE IDs covered (1)

CVE-2021-36737 →

📋 Description

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact

🎯 Affected products1

maven/org.apache.portals.pluto:pluto-portal:< 3.1.1

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2021-36737
https://lists.apache.org/thread/x7kt47bf358x8sg9qg02zt0dmdrtow25
https://github.com/advisories/GHSA-x588-g38j-f672