CVE-2025-27867 — Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin

CVE-2025-27867

Apache Felix HTTP Webconsole Plugin: XSS in HTTP Webconsole Plugin PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0. Users are recommended to upgrade to version 1.2.2, which fixes the issue.

Affected (CNA)

Vendor / product	Versions
Apache Software Foundation / Apache Felix HTTP Webconsole Plugin	affected 1.x through 1.2.0

CWE

CWE-79

References

https://lists.apache.org/thread/y83f2rvm8bccr5ctgv7mzxd69p6f77dp

ADP enrichment

CVE

No English description supplied.

http://www.openwall.com/lists/oss-security/2025/03/12/3

CISA-ADP

No English description supplied.

No references supplied.