Severity: moderate
Affected versions:
- Apache Felix Healthcheck Webconsole Plugin through 2.0.2
Description:
An improper neutralization of input during web page generation ('Cross-site
Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole
Plugin version 2.0.2 and prior may allow an attacker to perform a reflected
cross-site scripting (XSS) attack.
Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.
Credit:
This vulnerability was found by xray web vulnerability scanner
(github.com/chaitin/xray) (finder)
References:
https://felix.apache.org/
https://www.cve.org/CVERecord?id=CVE-2023-38435
