Lucene search
Veracode Vulnerability DatabaseVERACODE:13437HistoryMar 12, 2019 - 2:07 a.m.
Cross-Site Scripting (XSS)
2019-03-1202:07:06
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
38.0%
portal-service is vulnerable to cross-site scripting (XSS). The library does not sanitize the Public Render Parameter p_r_p value, allowing the attacker to inject arbitrary script through it.
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay portal service | eq | 6.1.0 |
References
Related
prion
prion
Design/Logic Flaw
2017-12-27 17:08:00
cvelist
cvelist
CVE-2017-17868
2017-12-23 23:00:00
cve
cve
CVE-2017-17868
2017-12-27 17:08:20
nvd
nvd
CVE-2017-17868
2017-12-27 17:08:20