Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities

Description

References

• nvd.nist.gov/vuln/detail/CVE-2009-0038 · ADVISORY
• apache/geronimo commit aa0c2c2 · WEB
• apache/geronimo · PACKAGE
• web.archive.org/web/20090419162753/http://secunia.com/advisories/34715 · WEB
• web.archive.org/web/20090422192202/http://dsecrg.com/pages/vul/show.php · WEB
• web.archive.org/web/20200229223125/http://www.securityfocus.com/bid/34562 · WEB
• geronimo.apache.org/21x-security-report.html · WEB
• issues.apache.org/jira/browse/GERONIMO-4597 · WEB
• dsecrg.com/pages/vul/show.php · Exploit
• secunia.com/advisories/34715
• securityfocus.com/archive/1/502734/100/0/threaded
• securityfocus.com/bid/34562

org.apache.geronimo.plugins:console의 다른 취약점

• CVE-2009-0039보통 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 throu…
• CVE-2008-5518심각 9.4Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Wi…