CVE-2019-6588
Description
In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the url parameter of the JSP taglib call /> or />. Liferay Portal out-of-the-box behavior with no customizations is not vulnerable.
Risk Information
Base Score
4.7
MODERATE
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS Score
Exploitation Probability
0.691
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2019-6588 are fixed in Liferay - release.portal.bom 7.1.0 | Windows |
| Vulnerabilities CVE-2019-6588 are fixed in Liferay - release.portal.bom for Linux 7.1.0 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234