Threats tagged 'ghsa-84h8-j9vj-p626'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-123766axis2-java-core · Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in High2026-11-09GCVE DatabaseCVE-2026-123766 A Cross-site Scripting (XSS) vulnerability exists in the OpenAPI module of Apache Axis2/Java. The Swagger UI page improperly includes a value derived from the HTTP Host header without proper encoding, enabling script injection in the context of the Axis2 origin. This affects version 2.0.1 and is fixed in version 2.0.2. Report on CVE-2026-123766 Vulnerability CWE-79 #ghsa-84h8-j9vj-p626	GCVE Database	2026-11-09

Page 1 of 1