[LPE-17027] XSS Issue in the login portlet - Liferay Issues

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Minor
Resolution: Fixed
Affects Version/s: 7.0 DE (7.0.10), 7.1 DXP (7.1.10), 7.2 DXP (7.2.10), 7.3
Fix Version/s: 7.0.X EE, 7.1.x EE, 7.2.X EE
Component/s: Application Security > Login/Sign in Portlet, Security Vulnerability
Labels:

7.0 Fix Pack Version:
93

Description

A cross site scripting (XSS) vulnerability exists with the openId of the Login portlet. An attacker can potentially exploit this security vulnerability to insert malicious JavaScript into a page.

Attachments

Activity

People

Assignee:: Enterprise Release HU

Reporter:: Amanda Kwok

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 22/May/20 8:41 AM

Updated:: 20/Jul/20 3:10 AM

Resolved:: 14/Jul/20 2:48 AM

Packages

Version	Package
7.0.X EE
7.1.x EE
7.2.X EE