[#DOTCMS-1787] XSS vulnerability in error .jsp pages

dotCMS

Created: August 07, 2008 8:59 AM Updated: July 23, 2009 11:53 AM

Component/s:

a. Unknown

Affects Version/s:

1.6.0, 1.6.0.1, 1.6.0.2, 1.6.0.3, 1.6.0.4, 1.6.0.5, 1.6.0.6, 1.6.0.7, 1.6.0.8, 1.6.0.9

Fix Version/s:

None

Time Tracking:

Original Estimate:

30 minutes

Remaining Estimate:

30 minutes

Time Spent:

Not Specified

Issue Links:

Duplicate

This issue duplicates:

Description

« Hide

This most probably affects all the default .jsp error pages:

dotCMS/portal/

401.jsp
403.jsp
404.jsp
500.jsp

http://demo.dotcms.org/%3Cscript%3Ealert('I%20am%20a%20bug!')%3C/script%3E/

All

Comments

Work Log

Change History

Subversion Commits

FishEye

Sort Order:

There are no comments yet on this issue.