CVE-2011-1570

Опубликовано: 07 мая 2011

Источник: nvd

CVSS2: 3.5

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.

Ссылки

http://issues.liferay.com/browse/LPS-12628
Issue Tracking
Vendor Advisory
http://issues.liferay.com/browse/LPS-13250
Exploit
Issue Tracking
Vendor Advisory
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
Release Notes
Vendor Advisory
http://openwall.com/lists/oss-security/2011/03/29/1
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/08/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/11/9
Mailing List
Third Party Advisory
http://issues.liferay.com/browse/LPS-12628
Issue Tracking
Vendor Advisory
http://issues.liferay.com/browse/LPS-13250
Exploit
Issue Tracking
Vendor Advisory
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
Release Notes
Vendor Advisory
http://openwall.com/lists/oss-security/2011/03/29/1
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/08/5
Mailing List
Third Party Advisory
http://openwall.com/lists/oss-security/2011/04/11/9
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:liferay:liferay_portal:*:*:*:*:community:*:*:*

Версия от 6.0.0 (включая) до 6.0.5 (включая)

cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

EPSS

Процентиль: 70%

0.00646

Низкий

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2011-1570

debian

больше 14 лет назад

Cross-site scripting (XSS) vulnerability in Liferay Portal Community E ...

GHSA-gjpw-cmmh-976v

github

больше 3 лет назад