CVE-2017-12645: XSS
Published Aug 7, 2017
·Updated
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
Affected Software
1 affected component
Liferay Liferay Portal<=7.0
Remediation
Event History
Aug 7, 2017
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-12645?
CVE-2017-12645 has a medium severity rating due to its potential impact through XSS vulnerabilities.
2
How do I fix CVE-2017-12645?
To fix CVE-2017-12645, upgrade to Liferay Portal version 7.0 CE GA4 or later.
3
What type of vulnerability is CVE-2017-12645?
CVE-2017-12645 is an XSS (Cross-Site Scripting) vulnerability.
4
Which versions of Liferay are affected by CVE-2017-12645?
CVE-2017-12645 affects Liferay Portal versions up to and including 7.0 GA3.
5
What can an attacker do with CVE-2017-12645?
An attacker can exploit CVE-2017-12645 to execute arbitrary scripts in the context of a user's session.