CVE-2023-38435CWE-79

Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin

published July 25, 2023

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack.

Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02247 · 82.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2023-07-25T15:40Z
EPSS history
Timeline
  • 25 JUL 15:40Z
    Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin
    cvelistv5