-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.google.gwt:gwt | maven | < 2.5.1 | 2.5.1 |
The vulnerability stemmed from unescaped reflection of the 'testCase' parameter in JUnit test host pages. The commit diff (r11385) shows URL.encodeQueryString() was added to sanitize this parameter, indicating prior lack of output encoding. This matches the XSS vulnerability pattern described in CVE-2013-4204's documentation and security advisories.
A Semantic Attack on Google Gemini - Read the Latest Research