Description. Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter. Source: MITRE Last Modified: 01/02/2018 ...
from Google Alert - vulnerability http://ift.tt/2CfFOlO
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment