CVE-2021-36737

CVE-2021-36737: XSS in V3 Demo Portlet

Vendor Apache Software Foundation
Product Apache Portals
Weakness CWE-79 · XSS
Published January 6, 2022
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact

Key dates

02Disclosure timeline

January 6, 2022 CVE published
August 4, 2024 Record updated