XSL Content portlet can be configured with any XML/XSL

• Type: Bug
• Status: Closed
• Resolution: Duplicate
• Affects Version/s: 6.2.3 CE GA4
• Fix Version/s: 6.0.X EE, 6.1.X EE, 6.2.X EE, 7.0.0 M5
• Component/s: Security Vulnerability
• Labels:
  • cst-patch

The XSL Content portlet allows anyone who has permission to configure the portlet to specify any XML/XSL file. By creating the appropriate XML/XSL file, a user can access any file on the system, launch denial-of-service attacks and more.