CVE-2025-27867 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin. This issue affects A…
Medium CVSS: 5.6

CVE-2025-27867

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix HTTP Webconsole Plugin.

This issue affects Apache Felix HTTP Webconsole Plugin: from Version 1.X through 1.2.0.

Users are recommended to upgrade to version 1.2.2, which fixes the issue.
Vendor
Apache
Product
Felix Http Webconsole Plugin
CWE
CWE-79
Yayın Tarihi
2025-03-12 16:15:24
Güncelleme
2025-07-16 18:09:04
Source Identifier
security@apache.org
KEV Date Added
-

Kategoriler

CWE-79 Felix Http Webconsole Plugin MEDIUM Apache 2025

Referanslar

https://lists.apache.org/thread/y83f2rvm8bccr5ctgv7mzxd69p6f77dp http://www.openwall.com/lists/oss-security/2025/03/12/3