Executive brief
Apache Geode vulnerable to Cross-Site Scripting
Affected products
- Maven org.apache.geode:geode-core
Junglewise Threat Intelligence
CVE-2022-34870: Apache Geode vulnerable to Cross-Site Scripting
CVE-2022-34870 · Severity: low · CVSS 3.1 · Published 2022-10-25
Technologies: org.apache.geode:geode-core (Maven). Vendors: Maven.
Related threats
- Apache Geode versions prior to 1.15.0 are vulnerable to a deserialization of untrusted data
- Apache Geode versions deserialization of untrusted datawhen using JMX over RMI on Java 11
- Apache Geode information disclosure vulnerability
- Apache Geode gfsh query vulnerability
- Apache Geode gfsh authorization vulnerability