[FELIX-3010] XSS in Felix Web Console - ASF JIRA

Voters

Watch issue

Watchers

Link

Clone

Update Comment Author

Replace String in Comment

Update Comment Visibility

Delete Comments

XML

Word

Printable

JSON

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Fixed
Affects Version/s: webconsole-3.1.8
Fix Version/s: webconsole-4.0.0
Component/s: Web Console
Labels:
- console
- felix
- xss

Description

http://localhost:4502/system/console/configMgr/%3Cscript%3Ealert(23);%3C/script%3E

Attachments

Activity

Comment

This comment will be Viewable by All Users Viewable by All Users

Cancel

People

Assignee:: Carsten Ziegeler

Reporter:: Lars Krapf

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 23/Jun/11 12:46

Updated:: 23/Nov/12 06:54

Resolved:: 16/Jul/11 17:29

Agile

Slack

Issue deployment