~ / search / GHSA-fxp8-7h5w-h235

GHSA-fxp8-7h5w-h235

XSS in search engine

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-13234

Packages

EcosystemPackageAffectedFixed in
Maven org.opencms:opencms-core < 11.0.1 11.0.1

Details

As written in the advisory (Markdown source, shown as plain text).

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

References

External links from the advisory. They lead to third-party sites.