Description
Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.
Remediation
References
https://lists.apache.org/thread/zltlr7f2ymr2m6jj54k4z0c4foos5fwx
http://www.openwall.com/lists/oss-security/2022/10/24/3
Related Vulnerabilities
CVE-2015-7559 Vulnerability in maven package org.apache.activemq:activemq-all
CVE-2019-17632 Vulnerability in maven package org.eclipse.jetty:jetty-server
CVE-2023-2968 Vulnerability in npm package proxy
CVE-2021-37578 Vulnerability in maven package org.apache.juddi:juddi-core
CVE-2022-36944 Vulnerability in maven package org.scala-lang:scala-library