Portal CVE-2011-1570 Cross-Site Scripting Vulnerability
BID:73608
Info
Portal CVE-2011-1570 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73608 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-1570 |
| Remote: | Yes |
| Local: | No |
| Published: | May 07 2011 12:00AM |
| Updated: | May 07 2011 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Liferay Portal 6.0.5 Community Liferay Portal 6.0.4 Community Liferay Portal 6.0.3 Community Liferay Portal 6.0.2 Community Liferay Portal 6.0.1 Community Liferay Portal 6.0.0 Community |
| Not Vulnerable: | |
Discussion
Portal CVE-2011-1570 Cross-Site Scripting Vulnerability
Portal is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.
Portal is prone to a cross-site scripting vulnerability. Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.
Solution / Fix
Portal CVE-2011-1570 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]