CVE-2018-8035 | BDVDB-2026-115939 Detail

ApacheApache UIMA DUCC

Description#

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://uima.apache.org/security_report
http://www.securityfocus.com/bid/108195
https://lists.apache.org/thread.html/2f49681259b375d53431605f1c557ef8a3ed0af01a488d2e1b330053%40%3Cdev.uima.apache.org%3E

Exploit#

No public exploit known

History#

Version 12019-05-01Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.