CVEvulnerability
CVE-2011-1570
3.5 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-05-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.5 LOW — AV:N/AC:M/Au:S/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote authenticated users to inject arbitrary web script or HTML via a message title, a different vulnerability than CVE-2004-2030.
Affected configurations
• liferay liferay portal (>= 6.0.0 <= 6.0.5)
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://issues.liferay.com/browse/LPS-12628 Issue Tracking, Vendor Advisory
- http://issues.liferay.com/browse/LPS-13250 Exploit, Issue Tracking, Vendor Advisory
- http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952 Release Notes, Vendor Advisory
- http://openwall.com/lists/oss-security/2011/03/29/1 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/5 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/11/9 Mailing List, Third Party Advisory
- http://issues.liferay.com/browse/LPS-12628 Issue Tracking, Vendor Advisory
- http://issues.liferay.com/browse/LPS-13250 Exploit, Issue Tracking, Vendor Advisory
- http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952 Release Notes, Vendor Advisory
- http://openwall.com/lists/oss-security/2011/03/29/1 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/08/5 Mailing List, Third Party Advisory
- http://openwall.com/lists/oss-security/2011/04/11/9 Mailing List, Third Party Advisory