CVE-2014-5326

EPSS 0.22%

Improper Neutralization of Input During Web Page Generation in Direct Web Remoting

發布日:2022/5/17修改日:2024/12/7

描述

Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

受影響套件(1)

Maven/org.directwebremoting:dwrfrom 0, < 2.0.11

參考連結(3)

ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2014-5326
WEBhttp://jvndb.jvn.jp/jvndb/JVNDB-2014-000118
WEBhttp://jvn.jp/en/jp/JVN52422792/index.html