CVE-2014-3650

Multiple persistent cross-site scripting (XSS) flaws were found in the way Aerogear handled certain user-supplied content. A remote attacker could use these flaws to compromise the application with specially crafted input.

Score

CVSS 3.1 5.4 Medium

Status

Modified - secalert@redhat.com

Published

2022-07-01

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Jboss Aerogear (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=1144212
• https://issues.redhat.com/browse/AEROGEAR-5978