CVE-2022-34870 — Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application

CVE-2022-34870

Apache Geode stored Cross-Site Scripting (XSS) via data injection vulnerability in Pulse web application PUBLISHED

Description (CNA)

Apache Geode versions up to 1.15.0 are vulnerable to a Cross-Site Scripting (XSS) via data injection when using Pulse web application to view Region entries.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Geode	affected Apache Geode through 1.15.0

CWE

No CWE identifiers supplied.

References

https://lists.apache.org/thread/zltlr7f2ymr2m6jj54k4z0c4foos5fwx
http://www.openwall.com/lists/oss-security/2022/10/24/3

ADP enrichment

CVE

No English description supplied.

https://lists.apache.org/thread/zltlr7f2ymr2m6jj54k4z0c4foos5fwx
http://www.openwall.com/lists/oss-security/2022/10/24/3

CISA-ADP

No English description supplied.

No references supplied.