CVE-2022-34870

CVE-2022-34870: Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application

Vendor Apache Software Foundation
Product Apache Geode
Published October 25, 2022
Last update May 9, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.

Key dates

02Disclosure timeline

October 25, 2022 CVE published
May 9, 2025 Record updated