XSS Issues in Document Type

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.1.0 CE GA1, 6.1.10 EE GA1, 6.2.0 CE M2
• Fix Version/s: 6.1.10 EE GA1, 6.1.20 EE GA2, --Sprint 11/12, 6.2.0 CE M2
• Component/s: Documents & Media
• Labels:
  • QA-R
• Environment: Tomcat 7.0 + MySQL 5. 6.1.x EE GIT ID: f42f42b68c5e9d8050118a4a6e08172746ba602a. ; Tomcat 7.0 + MySQL 5. 6.2.x GIT ID: afc7e5200242e4db563be2e32eb2755c3172bc91.
• Branch Version/s:
  6.1.x
• Backported to Branch:
  Committed
• Added to Fix Pack:
  Added
• Git Pull Request: https://github.com/hhuijser/liferay-portal/pull/542

1. Add Documents and Media portlet.
2. Click Manege drop menu.
3. Click Document Types.
4. Fill <script>alert("xss")</script> in name.
5. Click Save.