Description (CNA)
This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Apache / Apache UIMA DUCC | affected Apache UIMA DUCC releases including and prior to 2.2.2 |
CWE
No CWE identifiers supplied.
References
- https://uima.apache.org/security_report
- http://www.securityfocus.com/bid/108195
- https://lists.apache.org/thread.html/2f49681259b375d53431605f1c557ef8a3ed0af01a488d2e1b330053%40%3Cdev.uima.apache.org%3E
ADP enrichment
No English description supplied.