CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Apache.
CVE
CVE-2022-32533
Severity
CRITICAL
CVSS
9.8
EPSS
3.88%
Apache
Original NVD Description
Apache Jetspeed-2 does not sufficiently filter untrusted user input by default leading to a number of issues including XSS, CSRF, XXE, and SSRF. Setting the configuration option "xss.filter.post = true" may mitigate these issues. NOTE: Apache Jetspeed is a dormant project of Apache Portals and no updates will be provided for this issue
Related CVEs
Other vulnerabilities affecting the same vendor(s)