Executive Summary
This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.
Summary | |
---|---|
Title | Liferay Portal Forgot Password User-Agent HTTP header XSS |
Informations | |||
---|---|---|---|
Name | VU#888209 | First vendor Publication | 2008-01-31 |
Vendor | VU-CERT | Last vendor Modification | 2008-01-31 |
Severity (Vendor) | N/A | Revision | M |
Security-Database Scoring CVSS v3
Cvss vector : N/A | |||
---|---|---|---|
Overall CVSS Score | NA | ||
Base Score | NA | Environmental Score | NA |
impact SubScore | NA | Temporal Score | NA |
Exploitabality Sub Score | NA | ||
Calculate full CVSS 3.0 Vectors scores |
Security-Database Scoring CVSS v2
Cvss vector : (AV:N/AC:H/Au:N/C:N/I:P/A:N) | |||
---|---|---|---|
Cvss Base Score | 2.6 | Attack Range | Network |
Cvss Impact Score | 2.9 | Attack Complexity | High |
Cvss Expoit Score | 4.9 | Authentication | None Required |
Calculate full CVSS 2.0 Vectors scores |
Detail
Vulnerability Note VU#888209Liferay Portal Forgot Password User-Agent HTTP header XSSOverviewLiferay Portal contains a cross-site scripting vulnerability in the handling of the User-Agent HTTP header, which can allow a remote, authenticated attacker to inject content into "Forgot Password" emails.I. DescriptionLiferay Portal is an enterprise portal solution that uses Java technologies. The "Forgot Password" feature of Liferay Portal fails to properly sanitize the User-Agent field supplied in HTTP headers. This can allow a remote, authenticated attacker to inject content into the email that is generated by the "Forgot Password" feature.II. ImpactA remote, authenticated attacker may be able to inject content into the email messages generated by the "Forgot Password" feature.III. SolutionApply an updateThis issue is addressed in Liferay versions 4.4.0 and 4.3.7, as specified in Liferay support document LEP-4737.
References
Thanks to Tomasz Kuczynski for reporting this vulnerability. This document was written by Will Dormann.
|
Original Source
Url : http://www.kb.cert.org/vuls/id/888209 |
CWE : Common Weakness Enumeration
% | Id | Name |
---|---|---|
100 % | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25) |
CPE : Common Platform Enumeration
Type | Description | Count |
---|---|---|
Application | 1 |
Open Source Vulnerability Database (OSVDB)
Id | Description |
---|---|
41335 | Liferay Portal service/impl/UserLocalServiceImpl.java User-Agent HTTP Header XSS |