Cross-Site Scripting Vulnerability in Apache jUDDI
CVE-2009-1198

6.1MEDIUM

Key Information:

Vendor
Apache
Status
Juddi
Vendor
CVE Published:
30 October 2017

Summary

Apache jUDDI prior to version 2.0 is susceptible to a Cross-Site Scripting (XSS) vulnerability. This flaw allows remote attackers to inject arbitrary web scripts or HTML via the 'dsname' parameter in the 'happyjuddi.jsp' file. Exploiting this vulnerability could lead to unauthorized actions and data exposure, making it crucial for users to secure their installations by updating to the latest version.

References

http://www.securityfocus.com/bid/101623
vdb-entryx_refsource_BID
http://marc.info/?l=juddi-dev&m=125000625404010&w=2
mailing-listx_refsource_MLIST
http://issues.apache.org/jira/browse/JUDDI-221
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.