CVE-2014-5326

EPSS 0.22%

Improper Neutralization of Input During Web Page Generation in Direct Web Remoting

Published: 5/17/2022Modified: 12/7/2024

Description

Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected packages (1)

Maven/org.directwebremoting:dwrfrom 0, < 2.0.11

References (3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2014-5326
WEBhttp://jvndb.jvn.jp/jvndb/JVNDB-2014-000118
WEBhttp://jvn.jp/en/jp/JVN52422792/index.html