Description

Multiple cross-site scripting (XSS) vulnerabilities in Red Hat JBoss Web Framework Kit 2.5.0 allow remote attackers to inject arbitrary web script or HTML via a (1) parameter or (2) id name.

Remediation

References

http://rhn.redhat.com/errata/RHSA-2014-0462.html

https://bugzilla.redhat.com/show_bug.cgi?id=1078646

Related Vulnerabilities

CVE-2013-6374 Vulnerability in maven package com.sonyericsson.jenkins.plugins.bfa:build-failure-analyzer

CVE-2020-4077 Vulnerability in npm package electron

CVE-2022-4137 Vulnerability in maven package org.keycloak:keycloak-themes

CVE-2019-12421 Vulnerability in maven package org.apache.nifi:nifi-framework

CVE-2015-5325 Vulnerability in maven package org.jenkins-ci.main:jenkins-core

Severity

Critical

Classification

CWE-79

Tags

Vendor Advisory