CST-7019 DoS vulnerability via SessionClicks

Description

Unsanitized data in SessionClicks allows an attacker to cause a denial-of-service (DoS) via crafted URLs. The denial-of-service is limited to users who have clicked on the crafted URL and may prevent the user from accessing some portlets.

Severity

Severity 2

Fixed Version(s)

Acknowledgments

This issue was reported by Marko Winkler

Publication Date: 

6月 26, 2017

Found a Bug?

If you have found, or think you have found a bug, help us to help you by letting us know!

Found a Security Vulnerability?

There's a different process available if you have a security issue to report...

Hall of Fame!

Raise your profile - report security vulnerabilities and enter the Hall of Fame!