https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 22:49:34 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-168815 EUVD-2026-168815 https://cve.radiocsirt.org/vuln/euvd-2026-168815 https://cve.radiocsirt.org/vuln/fkie_cve-2017-3165 <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user&#39;s resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user&#39;s resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-3165 https://cve.radiocsirt.org/vuln/ghsa-j3g9-3fvv-gqfp <p><strong>Affected:</strong> Maven: org.apache.brooklyn:brooklyn</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user&#39;s resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.</p> <p><strong>Affected:</strong> Maven: org.apache.brooklyn:brooklyn</p> <p>In Apache Brooklyn before 0.10.0, the REST server is vulnerable to cross-site scripting where one authenticated user can cause scripts to run in the browser of another user authorized to access the first user&#39;s resources. This is due to improper escaping of server-side content. There is known to be a proof-of-concept exploit using this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-j3g9-3fvv-gqfp https://cve.radiocsirt.org/vuln/gsd-2017-3165 gsd-2017-3165 https://cve.radiocsirt.org/vuln/gsd-2017-3165 https://cve.radiocsirt.org/vuln/jvndb-2017-000025 <p>Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains cross-site scripting vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>Apache Brooklyn is a framework for modeling, monitoring, and managing applications. Apache Brooklyn contains cross-site scripting vulnerabilities. It is known that proof-of-concept code to exploit these vulnerabilties exist. Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2017-000025