CVE-2016-10404

published 2017-08-07

CVE-2016-10404: XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-I…

medium 6.1 CVSS 3.0

AV N AC L PR N UI R S C C L I L A N

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted redirect field to modules/apps/foundation/frontend-js/frontend-js-spa-web/src/main/resources/META-INF/resources/init.jsp.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
liferay	liferay_portal	<= 7.0	—

CWE-79