You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@felix.apache.org by "Carsten Ziegeler (JIRA)" <ji...@apache.org> on 2011/07/15 17:13:59 UTC

[jira] [Updated] (FELIX-3010) XSS in Felix Web Console

     [ https://issues.apache.org/jira/browse/FELIX-3010?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carsten Ziegeler updated FELIX-3010:
------------------------------------

    Fix Version/s: webconsole-3.1.10

> XSS in Felix Web Console
> ------------------------
>
>                 Key: FELIX-3010
>                 URL: https://issues.apache.org/jira/browse/FELIX-3010
>             Project: Felix
>          Issue Type: Bug
>          Components: Web Console
>    Affects Versions: webconsole-3.1.8
>            Reporter: Lars Krapf
>            Assignee: Carsten Ziegeler
>              Labels: console, felix, xss
>             Fix For: webconsole-3.1.10
>
>
> http://localhost:4502/system/console/configMgr/%3Cscript%3Ealert(23);%3C/script%3E

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira