CVE:CVE-2021-3914
CNNVD:CNNVD-202205-3793
SmallRye是Smallrye团队的一款开源的MicroProfile（微服务架构优化协议）的实现。
SmallRye smallrye-health-ui 组件存在跨站脚本漏洞，该漏洞源于未正确清理某些用户输入。攻击者可以利用此漏洞进行跨站点脚本攻击。
solution:Upgrade redhat build_of_quarkus to a higher version than 2.7.5,-,and avoid the version (,2.7.5); Upgrade redhat openshift_application_runtimes to a higher version than 1.0,and avoid the version 1.0; Upgrade redhat smallrye_health to a higher version than -