Cross-site Scripting in Apache Pluto

MEDIO 6.1CVE-2021-36739 · GHSA-3qp6-m7hp-jrwf · Published 06/01/2022 · updated 17/06/2026

In breve

CVE-2021-36739 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda org.apache.portals.pluto:pluto-portal, pluto (apache).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 2.4%, superiore al 84.1% delle vulnerabilità.
Correzione: aggiornare a 3.1.1 o successiva.

Package	Affected versions	Patched versions
org.apache.portals.pluto:pluto-portal Maven	`< 3.1.1`	`3.1.1`
pluto apache	`= 3.1.0`	No fix yet

Description

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

NVD description

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

References

nvd.nist.gov/vuln/detail/CVE-2021-36739 · ADVISORY
apache/portals-pluto · PACKAGE
lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p · WEB

Altre vulnerabilità di org.apache.portals.pluto:pluto-portal

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free