Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4897
HistoryAug 08, 2017 - 5:20 p.m.

Cross-site Scripting (XSS)

2017-08-0817:20:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7

EPSS

0.001

Percentile

37.0%

Liferay portal-impl is vulnerable to cross-site scripting (XSS) attacks. The library does not sanitize the portletID field when a portlet is deployed, allowing a malicious user to inject and execute arbitrary web script.

EPSS

0.001

Percentile

37.0%

Related for VERACODE:4897