Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:opengrok:1.14.1:*:*:*:*:*:*:*

part: a version: 1.14.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductOpengrok (e34116ec-799e-5175-9c64-b5783f6f989a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/oracle/opengrok purl2cpe 2026-06-01 10:18:14.632994
pkg:rpm/opensuse/opengrok purl2cpe 2026-06-01 10:18:14.632995

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-30755 vulnerable 2026-06-08 07:17:01.757464 Details available
MEDIUM (6.1)
OpenGrok 1.14.1 has a reflected Cross-Site Scripting (XSS) issue when producing the cross reference page. This happens through improper handling of the revision parameter. The application reflects unsanitized user input into the HTML output.
Published: 2025-09-18T23:32:07.807Z
Updated: 2025-09-19T13:10:31.350Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.