CVE-2019-13235: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

November 12, 2019 (updated August 18, 2021)

In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.

References

aetsu.github.io/OpenCms
github.com/advisories/GHSA-2p6p-v69p-9mm9
github.com/alkacon/apollo-template/commits/branch_10_5_x
nvd.nist.gov/vuln/detail/CVE-2019-13235

Detect and mitigate CVE-2019-13235 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →