description: It was found that the smallrye health metrics UI component did not properly sanitize some user inputs. An attacker could use this flaw to conduct cross-site scripting attacks.
problem types: CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
product: smallrye-health
vendor: n/a
versions:
status: affected, version: Not-Known
}