Apache Felix Webconsole Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in Apache Felix Webconsole. This issue affects versions 4.x prior to 4.9.8 and 5.x prior to 5.0.8. The vulnerability arises from improper input neutralization during web page generation, allowing for the injection of malicious scripts.

Impact

Exploitation of this vulnerability allows for cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.

Remediation

Users are advised to upgrade to Apache Felix Webconsole version 4.9.10 or 5.0.10 or higher, both of which address this vulnerability.