(Difference between pages)
No edit summary |
m (Reverted edits by Margit.link-rodrigue (talk) to last revision by Mglaser) Tag: Rollback |
||
Line 1: | Line 1: | ||
{| class="wikitable" | |||
|+ | |||
! | |||
! | |||
|- | |||
|Date | |||
|2022-01-31 | |||
|- | |||
|Severity | |||
|Medium | |||
|- | |||
|Affected | |||
|BlueSpice 3.x, BlueSpice 4.x | |||
|- | |||
|Fixed in | |||
|BlueSpice 3.2.9, BlueSpice 4.1.1 | |||
|} | |||
== Problem == | |||
Users are able to inject arbitrary HTML (XSS) on Special:SearchCenter, using the search term. This can be triggered via URL. | |||
== Solution == | |||
Upgrade to BlueSpice 4.1.1 | |||
== Acknowledgements == | |||
Special thanks to the security team of an undisclosed customer |
Revision as of 09:16, 26 April 2022
Date | 2022-01-31 |
Severity | Medium |
Affected | BlueSpice 3.x, BlueSpice 4.x |
Fixed in | BlueSpice 3.2.9, BlueSpice 4.1.1 |
Problem
Users are able to inject arbitrary HTML (XSS) on Special:SearchCenter, using the search term. This can be triggered via URL.
Solution
Upgrade to BlueSpice 4.1.1
Acknowledgements
Special thanks to the security team of an undisclosed customer
File history
Click on a date/time to view the file as it appeared at that time.
Date/Time | Thumbnail | Dimensions | User | Comment | |
---|---|---|---|---|---|
current | 15:45, 17 August 2023 | 606 × 264 (11 KB) | Margit Link-Rodrigue (talk | contribs) | ||
10:04, 25 March 2022 | 610 × 265 (10 KB) | Margit Link-Rodrigue (talk | contribs) |
You cannot overwrite this file.
File usage
The following page uses this file: