PT-2017-7899
CVE-2016-10404
·
تاريخ النشر
2017-08-07
·
تاريخ التحديث
2022-05-17
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Liferay Portal versions prior to 7.0 CE GA4
Description
A security issue exists due to the presence of a crafted redirect field in the modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp file, which can lead to XSS.
Recommendations
For versions prior to 7.0 CE GA4, update to version 7.0 CE GA4 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾