[LPE-15305] Reflected XSS in Announcements - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Minor
Resolution: Fixed
Affects Version/s: 6.2 EE GA1 (6.2.10), 7.0 DE (7.0.10)
Fix Version/s: 6.2.X EE, 7.0.X EE
Component/s: Collaboration > Announcements, Security Vulnerability
Labels:

7.0 Fix Pack Version:
3

Description

A reflected cross-site scripting (XSS) vulnerability exist in Announcements. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page.

Attachments

Activity

People

Assignee:: Michael Prigge

Reporter:: Enterprise Release HU

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 26/Aug/16 1:17 AM

Updated:: 09/May/19 5:57 AM

Resolved:: 09/Sep/16 11:08 AM

Packages

Version	Package
6.2.X EE
7.0.X EE