VYPR
← All advisories
Medium severity6.1NVD Advisory· Published May 1, 2019· Updated Jun 17, 2026

CVE-2018-8035

CVE-2018-8035

Description

This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC (<= 2.2.2) which runs in the user's browser does not sufficiently filter user supplied inputs, which may result in unintended execution of user supplied javascript code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
org.apache.uima:uima-ducc-webMaven
< 3.0.03.0.0

Affected products

3
  • Apache/uimaDUCCcpe-rescue2 versions
    Apache UIMA DUCC releases including and prior to 2.2.2+ 1 more
    • (no CPE)range: Apache UIMA DUCC releases including and prior to 2.2.2
    • cpe:2.3:a:apache:uimaducc:*:*:*:*:*:*:*:*range: <=2.2.2
  • ghsa-coords
    pkg:maven/org.apache.uima/uima-ducc-web
    Range: < 3.0.0

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.