Denial-of-service attack with InvokerFilter

• Type: Bug
• Status: Closed
• Resolution: Duplicate
• Affects Version/s: 6.1.20 EE GA2
• Fix Version/s: 6.1.30 EE GA3
• Component/s: Security Vulnerability
• Labels: None

By manipulation the URL, an attacker can cause the portal to return a page not found error even when the URL represents an actual page.