[CVE-2019-0186] The input fields of the Chat Room demo are vulnerable to Cross-Site Scripting (XSS) attacks

--0000000000009eb39c05875ee340
Content-Type: text/plain; charset="UTF-8"

The input fields of the Apache Pluto "Chat Room" demo portlet are
vulnerable to Cross-Site Scripting (XSS) attacks.

Versions Affected:
3.0.0, 3.0.1

Mitigation:
* Uninstall the ChatRoomDemo war file
- or -
* migrate to version 3.1.0 of the chat-room-demo war file

For more information about Apache Pluto security updates, visit:
https://portals.apache.org/pluto/security.html

--0000000000009eb39c05875ee340
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div>The input fields of the Apache Pluto &quot;Chat Room&=
quot; demo portlet are vulnerable to Cross-Site Scripting (XSS) attacks.</d=
iv><div><br></div><div>Versions Affected:=C2=A0</div><div>3.0.0, 3.0.1</div=
><div><br></div><div>Mitigation:=C2=A0</div><div>* Uninstall the ChatRoomDe=
mo war file=C2=A0</div><div>- or -=C2=A0</div><div>* migrate to version 3.1=
.0 of the chat-room-demo war file</div><div><br></div><div>For more informa=
tion about Apache Pluto security updates, visit:</div><div><a href=3D"https=
://portals.apache.org/pluto/security.html">https://portals.apache.org/pluto=
/security.html</a><br></div><div><br></div></div>

--0000000000009eb39c05875ee340--