description: we got reports for 2 injection attacks against the DeltaSpike windowhandler.js. This is only active if a developer selected the ClientSideWindowStrategy which is not the default.
problem types: JavaScript Injection
affected:
{
product: Apache DeltaSpike
vendor: n/a
versions:
status: affected, version: Apache DeltaSpike up to including 1.9.2
}