Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-260

Cross Site Scripting Vulnerability (XSS)

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Fixed
    • Trunk
    • Trunk
    • ecommerce
    • None
    • Bug Crush Event - 21/2/2015

    Description

      It's a copy of http://jira.undersunconsulting.com/browse/OFBIZ-559 from Olivier Lietz.

      ===========================================================

      Very simple test:

      /ecommerce/control/keywordsearch?SEARCH_STRING=<script>alert("XSS");</script>

      Other components beside ecommerce are also affected.

      Attachments

        Issue Links

          is part of

          Improvement - An improvement or enhancement to an existing feature or task. OFBIZ-1525 Issue to group security concerns

          • Critical - Crashes, loss of data, severe memory leak.
          • Open
          is related to

          Sub-task - The sub-task of the issue OFBIZ-178 Cross site scripting vulnerability in Forum

          • Major - Major loss of function.
          • Closed

          Sub-task - The sub-task of the issue OFBIZ-1193 html code is not sanitized in all the text input field

          • Major - Major loss of function.
          • Closed

          Activity

            People

              jonesde David E. Jones
              risalitm Marco Risaliti
              Votes:
              1 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: