-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper input sanitization in web page generation (CWE-79). XSS in admin consoles typically occurs in request handlers and response renderers that process user input. The DefaultServlet and WebConsolePlugin classes are core components of the web console's request/response cycle. While no patch details are available, these components are logical candidates for unsafe parameter handling given the vulnerability description. Confidence is medium due to reliance on common XSS patterns in Java web applications and the architectural role of these components, though unconfirmed without concrete code examples.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.apache.felix:org.apache.felix.http.webconsoleplugin | maven | < 1.2.2 | 1.2.2 |