Apache Pluto vulnerabilities

• apache pluto, apache software foundation portals +1 more XSS vulnerability in the MVCBean JSP portlet maven archetype CVE-2021-36739 Fix available 6.1 MediumJanuary 6, 2022
• apache pluto, apache software foundation portals +1 more XSS vulnerability in the JSP version of the Apache Pluto Applicant MVCBean CDI portlet CVE-2021-36738 Fix available 6.1 MediumJanuary 6, 2022
• apache pluto, apache software foundation portals +1 more XSS in V3 Demo Portlet CVE-2021-36737 Fix available 6.1 MediumJanuary 6, 2022
• junit junit4, apache pluto, debian linux +1 more +3 more Information disclosure in JUnit4 CVE-2020-15250 Fix available 4.4 MediumOctober 12, 2020
• apache pluto Cross-site Scripting in Apache Pluto Chatroom demo CVE-2019-0186 Public exploitFix available EPSS 20.6% 6.1 MediumApril 26, 2019
• apache pluto Exposure of Sensitive Information in Apache Pluto CVE-2018-1306 Public exploitFix available EPSS 43.5% 7.5 HighJune 27, 2018