~ / search / GHSA-2cv6-4f2r-jq2c

GHSA-2cv6-4f2r-jq2c

Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

Source: GitHub Advisory Database (reviewed) Moderate CVE-2025-27867

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.felix:org.apache.felix.http.webconsoleplugin < 1.2.2 1.2.2

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.