GitHub Advisoryadvisory · Maven

GHSA-x24q-xwrf-66jm Improper Neutralization of Input During Web Page Generation in Google Web Toolkit

MEDIUM Published 2022-05-17 Modified 2022-07-08 Official page ↗
Aliases
CVE-2013-4204
Ecosystem
Maven
Packages
com.google.gwt:gwt
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2022-07-08

Affected packages

• Maven com.google.gwt:gwt: < 2.5.1 → fixed in 2.5.1

Description

Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2013-4204 Multiple cross-site scripting (XSS) vulnerabilities in the JUnit files in the GWTTestCase in Google Web Toolkit (GWT) before 2.5.1 RC1… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References