CVE-2011-0533

Published Feb 17, 2011 CVSS 2.0 · 4.3 Medium EPSS 4.2% KEV · Not listed
Description
Cross-site scripting (XSS) vulnerability in Apache Continuum 1.1 through 1.2.3.1, 1.3.6, and 1.4.0 Beta; and Archiva 1.3.0 through 1.3.3 and 1.0 through 1.22 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, related to the autoIncludeParameters setting for the extremecomponents table.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Github GHSA Github GHSA GHSA-7382-fv7p-v9v3 Apache Continuum and Archiva vulnerable to Cross-site Scripting
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 9:58 PM
Reserved
Jan 20, 2011, 12:00 AM
Status
Modified
Published
Feb 17, 2011, 6:00 PM
Modified
Jun 16, 2026, 11:27 PM