CVE:CVE-2020-21266
CNNVD:CNNVD-202010-1635
Broadleaf Commerce是Broadleaf Commerce团队的一个Java开源电子商务网站框架。
Broadleaf Commerce 5.1.14-GA版本存在跨站脚本漏洞，该漏洞源于一个缓慢的HTTP post漏洞。
solution:Upgrade broadleafcommerce broadleaf_commerce to a higher version than 5.1.14-ga,and avoid the version 5.1.14-ga