Design/Logic Flaw

2017-12-2717:08:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

38.0%

In Liferay Portal 6.1.0, the tags section has XSS via a Public Render Parameter (p_r_p) value, as demonstrated by p_r_p_564233524_tag.

CPENameOperatorVersion
liferay_portaleq6.1.0

CPE	Name	Operator	Version
	liferay_portal	eq	6.1.0

References

cxsecurity.com/issue/WLB-2017120169

0.001 Low

EPSS

Percentile

38.0%

Related for PRION:CVE-2017-17868