CyberRota Analysis
AI-GeneratedA vulnerability exists in Java that allows an attacker to craft a request which, if executed by another user, can lead to the execution of malicious JavaScript code within that user's browser session. This could potentially result in unauthorized actions or data exposure within the context of the affected application. Organizations using Java in web applications should prioritize addressing this issue to mitigate the risk of session hijacking or other client-side attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An attacker can construct a request that, if issued by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application.