CVE-2021-36739 - OpenCVE

The "first name" and "last name" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

Access Vector Network

Access Complexity Medium

Authentication None

Confidentiality Impact None

Integrity Impact Partial

Availability Impact None

AV:N/AC:M/Au:N/C:N/I:P/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Apache	Pluto

Configuration 1 [-]

cpe:2.3:a:apache:pluto:3.1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p

History

No history.

MITRE

Status: PUBLISHED

Assigner: apache

Published: 2022-01-06T08:50:16

Updated: 2024-08-04T01:01:59.033Z

Reserved: 2021-07-14T00:00:00

Link: CVE-2021-36739

Vulnrichment

No data.

NVD

Status : Analyzed

Published: 2022-01-06T09:15:07.327

Modified: 2022-01-12T14:51:21.543

Link: CVE-2021-36739

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Apache Portals", "vendor": "Apache Software Foundation", "versions": [{"status": "affected", "version": "org.apache.portals.pluto.archetype:mvcbean-jsp-portlet-archetype 3.1.0"}]}], "descriptions": [{"lang": "en", "value": "The \"first name\" and \"last name\" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks."}], "metrics": [{"other": {"content": {"other": "moderate"}, "type": "unknown"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-01-06T08:50:16", "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "shortName": "apache"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p"}], "source": {"discovery": "UNKNOWN"}, "title": "XSS vulnerability in the MVCBean JSP portlet maven archetype", "workarounds": [{"lang": "en", "value": "If a project was generated from the affected maven archetype using a command like the following:\n\nmvn archetype:generate \\\n -DarchetypeGroupId=org.apache.portals.pluto.archetype \\\n -DarchetypeArtifactId=mvcbean-jsp-portlet-archetype \\\n -DarchetypeVersion=3.1.0 \\\n -DgroupId=com.mycompany \\\n -DartifactId=com.mycompany.my.mvcbean.jsp.portlet\n\nThen developers must fix the generated greeting.jspx file by escaping the rendered values submitted to the \"First Name\" and \"Last Name\" fields.\n\nFor example, change:\n\n <span>${user.firstName} ${user.lastName}! </span>\n\nTo:\n\n <span>${mvc.encoders.html(user.firstName)} ${mvc.encoders.html(user.lastName)}! </span>\n\nMoving forward, all such projects should be generated from version 3.1.1 of the Maven archetype.\n"}], "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@apache.org", "ID": "CVE-2021-36739", "STATE": "PUBLIC", "TITLE": "XSS vulnerability in the MVCBean JSP portlet maven archetype"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Apache Portals", "version": {"version_data": [{"version_affected": "=", "version_name": "org.apache.portals.pluto.archetype:mvcbean-jsp-portlet-archetype", "version_value": "3.1.0"}]}}]}, "vendor_name": "Apache Software Foundation"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The \"first name\" and \"last name\" fields of the Apache Pluto 3.1.0 MVCBean JSP portlet maven archetype are vulnerable to Cross-Site Scripting (XSS) attacks."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": [{"other": "moderate"}], "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')"}]}]}, "references": {"reference_data": [{"name": "https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p", "refsource": "MISC", "url": "https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p"}]}, "source": {"discovery": "UNKNOWN"}, "work_around": [{"lang": "en", "value": "If a project was generated from the affected maven archetype using a command like the following:\n\nmvn archetype:generate \\\n -DarchetypeGroupId=org.apache.portals.pluto.archetype \\\n -DarchetypeArtifactId=mvcbean-jsp-portlet-archetype \\\n -DarchetypeVersion=3.1.0 \\\n -DgroupId=com.mycompany \\\n -DartifactId=com.mycompany.my.mvcbean.jsp.portlet\n\nThen developers must fix the generated greeting.jspx file by escaping the rendered values submitted to the \"First Name\" and \"Last Name\" fields.\n\nFor example, change:\n\n <span>${user.firstName} ${user.lastName}! </span>\n\nTo:\n\n <span>${mvc.encoders.html(user.firstName)} ${mvc.encoders.html(user.lastName)}! </span>\n\nMoving forward, all such projects should be generated from version 3.1.1 of the Maven archetype.\n"}]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T01:01:59.033Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://lists.apache.org/thread/m5j87nn1lmvzp8b9lmh7gqq68g5lnb7p"}]}]}, "cveMetadata": {"assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09", "assignerShortName": "apache", "cveId": "CVE-2021-36739", "datePublished": "2022-01-06T08:50:16", "dateReserved": "2021-07-14T00:00:00", "dateUpdated": "2024-08-04T01:01:59.033Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}