Undisclosed Apache Velocity XSS Vulnerability Impacts GOV Sites
Undisclosed Apache Velocity XSS Vulnerability Impacts GOV Sites An undisclosed Cross-Site Scripting (XSS) vulnerability in Apache Velocity Tools can be exploited by unauthenticated attackers to target government sites, including NASAand NOAA. Although 90 days have elapsed since the vulnerability was reported and patched, BleepingComputer is not aware of a formal disclosure made by the project. Apache Velocity is a