description: The console in Apache jUDDI 3.0.0 does not properly escape line feeds, which allows remote authenticated users to spoof log entries via the numRows parameter.
problem types: Information Disclosure
affected:
{
product: jUDDI
vendor: Apache Software Foundation
versions:
status: affected, version: 3.0.0 fixed in 3.0.1
}