Vulnerabilities > Apache > Brpc > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-16 CVE-2023-45757 Cross-site Scripting vulnerability in Apache Brpc
Security vulnerability in Apache bRPC <=1.6.0 on all platforms allows attackers to inject XSS code to the builtin rpcz page. An attacker that can send http request to bRPC server with rpcz enabled can inject arbitrary XSS code to the builtin rpcz page. Solution (choose one of three): 1.
network
low complexity
apache CWE-79
6.1