-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from unsanitized user input being embedded in HTML output. The commit diff shows the addition of Encode.forHtml() sanitization to these specific parameters, confirming they were previously vulnerable. The parameters are explicitly listed in vulnerability descriptions as attack vectors, and the XSS pattern matches missing output encoding in JSP scriptlets.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.wso2.carbon.registry:carbon-registry | maven | < 4.8.12 | 4.8.12 |