Adding new content

[thavelock]

New Content

[snyk-io]

⛔ Snyk checks have failed. 1 issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (1)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
⛔	Code Security	0	1	0	0	1 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[snyk-io]

  Cross-site Scripting (XSS)

Unsanitized input from an HTTP parameter flows into print, where it is used to render an HTML page returned to the user. This may result in a Cross-Site Scripting attack (XSS).

Line 46 | CWE-79 | Priority score 900 | Learn more about this vulnerability

Data flow: 5 steps

Step 1 - 3

patch-mutual/WebContent/search.jsp

Line 33 in d528e1e

String id = request.getParameter("id");

Step 4 - 5

patch-mutual/WebContent/search.jsp

Line 46 in d528e1e

<%= id %>