[OFBIZ-11840] Reflected XSS in content component

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 17.12.03
• Fix Version/s: 17.12.05, 18.12.01
• Component/s: content
• Sprint: Bug Crush Event - 21/2/2015
• Assignee: Jacques Le Roux
• Reporter: Jacques Le Roux
• Created: 24/Jun/20 11:07
• Updated: 27/Feb/22 12:40
• Resolved: 18/Jul/20 10:11

Description

Harshit Shukla [e-mail] reported a Reflected XSS vulnerability in content component to the OFBiz security team, and we thank him for that.

I'll later quote here his email message when the vulnerability will be fixed. It's a post-auth vulnerability so we did not ask for a CVE.