← Database

CVE-2022-32533

CRITICAL CVSS: 9.8 Published: 2022-07-06 Modified: 2026-06-17

Description

Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no updates will be provided for this issue

Affected Platforms

Apache Jetspeed

Weakness Type

CWE-79, NVD-CWE-noinfo

References