Description

Cross-site scripting (XSS) vulnerability in Google Web Toolkit (GWT) 2.4 Beta and release candidates before 2.4.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

http://www.openwall.com/lists/oss-security/2012/10/31/1

http://www.securityfocus.com/bid/56336

https://developers.google.com/web-toolkit/release-notes#Release_Notes_2_4_0

Related Vulnerabilities

CVE-2021-25933 Vulnerability in maven package org.opennms:opennms-webapp

CVE-2018-20677 Vulnerability in npm package bootstrap

CVE-2022-0776 Vulnerability in npm package reveal.js

CVE-2018-8108 Vulnerability in npm package bui

CVE-2016-1000229 Vulnerability in npm package swagger-ui

Severity

Critical

Classification

CWE-79