Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-260

Cross Site Scripting Vulnerability (XSS)

    XMLWordPrintableJSON

    Details

    • Type: Sub-task
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: Trunk
    • Fix Version/s: Trunk
    • Component/s: ecommerce
    • Labels:
      None
    • Sprint:
      Bug Crush Event - 21/2/2015

      Description

      It's a copy of http://jira.undersunconsulting.com/browse/OFBIZ-559 from Olivier Lietz.

      ===========================================================

      Very simple test:

      /ecommerce/control/keywordsearch?SEARCH_STRING=<script>alert("XSS");</script>

      Other components beside ecommerce are also affected.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                jonesde David E. Jones
                Reporter:
                risalitm Marco Risaliti
              • Votes:
                1 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: