org.jbpm:jbpm-console-ng-human-tasks-client@6.1.0.CR1 vulnerabilities
-
latest version
6.5.0.Final
-
latest non vulnerable version
-
first published
11 years ago
-
latest version published
8 years ago
-
licenses detected
- [6.0.0.Alpha7,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the org.jbpm:jbpm-console-ng-human-tasks-client package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.Vulnerability | Vulnerable Version |
---|---|
org.jbpm:jbpm-console-ng-human-tasks-client is a JBPM Console NG Human Tasks Client. Affected versions of this package are vulnerable to Cross-site Scripting (XSS). An attacker may inject arbitrary web script or HTML via vectors related to task name html inputs. How to fix Cross-site Scripting (XSS)? Upgrade |
[6.0.0.Final,6.1.0.Final)
|