Jayl1n/CVE

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-17886 ↗	Oct 2, 2018Tuesday, 2 October 2018, 18:29	—	3.5 LOW
An issue was discovered in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a <svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429.