6.1med
CVE-2016-36701 exploit
Liferay Portal Vulnerable to XSS in Profile Search Functionality
Also known as GHSA-hq29-vqg6-pjpw
Published 10 y ago · modified 4 mo ago · JSON
CVSS
6.1
v3.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.5%
percentile 85%
Public exploits
1
Exploit-DB
Summary
Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attackers to inject arbitrary web script or HTML via the FirstName field.
Exploit prediction (EPSS)
2.49% probability of exploitation in the next 30 days, higher than 85% of all scored CVEs.
Exploits and detections
- EDB-39880 Liferay CE < 6.2 CE GA6 - Persistent Cross-Site Scripting · webapps · 2016-06-02
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 3.0 | 6.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:N/I:P/A:N |
| GitHub | 3.0 | 6.1 | CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | com.liferay:com.liferay.portal.search.web | <1.0.3 | 1.0.3 |
Classification
- Weakness
- CWE-79 Improper Neutralization of Input During Web Page Generation
References
- labs.integrity.pt /advisories/cve-2016-3670/ · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/39880/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- seclists.org /fulldisclosure/2016/Jun/5 · mailing-list, x_refsource_FULLDISC, x_transferred
- issues.liferay.com /browse/LPS-62387 · x_refsource_CONFIRM, x_transferred
- securitytracker.com /id/1036083 · vdb-entry, x_refsource_SECTRACK, x_transferred
- packetstormsecurity.com /files/137279/Liferay-CE-Stored-Cross-Site-Scripting.html · x_refsource_MISC, x_transferred
- nvd.nist.gov /vuln/detail/CVE-2016-3670 · advisory
- github.com /liferay/liferay-portal/commit/b7ce087039f3b753f36f558df5faefac4ad4b160 · web
- github.com /liferay/liferay-portal · package
- labs.integrity.pt /advisories/cve-2016-3670 · web
- exploit-db.com /exploits/39880 · web
Sources
- CVE List: CVE-2016-3670
- GitHub Advisory: GHSA-hq29-vqg6-pjpw
- NVD: CVE-2016-3670
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.