Medium severity6.1NVD Advisory· Published Apr 11, 2016· Updated Jun 17, 2026
CVE-2016-0712
CVE-2016-0712
Description
Cross-site scripting (XSS) vulnerability in Apache Jetspeed before 2.3.1 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to portal.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.apache.portals.jetspeed-2:jetspeedMaven | < 2.3.1 | 2.3.1 |
Affected products
2Patches
Vulnerability mechanics
References
5- portals.apache.org/jetspeed-2/security-reports.htmlnvdExploitVendor AdvisoryWEB
- github.com/advisories/GHSA-hj2v-85ph-8g48ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2016-0712ghsaADVISORY
- mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9@bluesunrise.com%3EghsaWEB
- mail-archives.apache.org/mod_mbox/portals-jetspeed-user/201603.mbox/%3CF868DBFC-A05C-4ABB-8B91-17CA54C174B9%40bluesunrise.com%3Envd
News mentions
0No linked articles in our index yet.