CVE-2023-38435

MediumCVSS 6.1

Published: 25/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

1.83%

76th percentile - higher than 76% of all known CVEs

Summary

The Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior contains a Cross-site Scripting (XSS) vulnerability due to improper neutralization of input during web page generation.

Risk Assessment

An attacker may exploit this vulnerability to perform a reflected XSS attack, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to upgrade the Apache Felix Healthcheck Webconsole Plugin to version 2.1.0 or higher.

Original NVD description (English source)

An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack. Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher.