Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet
Vulnerability Description
The input fields in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the applicant-mvcbean-cdi-jsp-portlet.war artifact
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Apache Pluto 跨站脚本漏洞
Vulnerability Description
Apache Pluto是美国阿帕奇（Apache）基金会的一套Portlet容器的运行时环境。 Apache Pluto Applicant MVCBean CDI portlet 存在跨站脚本漏洞，该漏洞源于 Apache Pluto Applicant MVCBean CDI portlet 的 JSP 版本中的输入字段容易受到跨站点脚本 (XSS) 攻击。
CVSS Information
N/A
Vulnerability Type
N/A