CVE-2021-36737
06.01.2022, 09:15
The input fields of the Apache Pluto UrlTestPortlet are vulnerable to Cross-Site Scripting (XSS) attacks. Users should migrate to version 3.1.1 of the v3-demo-portlet.war artifact
Vendor | Product | Version |
---|---|---|
apache | pluto | 𝑥 < 3.1.1 |
𝑥
= Vulnerable software versions