CVE-2011-1504

CVSS V2 Low 3.5 CVSS V3 None
Description
Cross-site scripting (XSS) vulnerability in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA allows remote authenticated users to inject arbitrary web script or HTML via a blog title.
Overview
  • CVE ID
  • CVE-2011-1504
  • Assigner
  • secalert@redhat.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2011-05-07T19:55:01
  • Last Modified Date
  • 2011-05-31T04:00:00
Weakness Enumerations
CWE URL
CWE-79 http://cwe.mitre.org/data/definitions/79.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:liferay:portal:5.0.0:rc:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.0.1:rc:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.1.0:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.1.1:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.1.2:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.2.0:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.2.1:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.2.2:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:5.2.3:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.0:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.1:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.2:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.3:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.4:*:community:*:*:*:*:* 1 OR
cpe:2.3:a:liferay:portal:6.0.5:*:community:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:S/C:N/I:P/A:N
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • SINGLE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • NONE
  • Base Score
  • 3.5
  • Severity
  • LOW
  • Exploitability Score
  • 6.8
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://issues.liferay.com/browse/LPS-12145
http://openwall.com/lists/oss-security/2011/04/11/9
http://issues.liferay.com/browse/LPS-11506
http://openwall.com/lists/oss-security/2011/03/29/1
http://issues.liferay.com/secure/ReleaseNote.jspa?version=10656&styleName=Html&projectId=10952
http://openwall.com/lists/oss-security/2011/04/08/5
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2011-1504
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1504
History
Created Old Value New Value Data Type Notes
2022-05-10 11:00:17 Added to TrackCVE