Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

XSS in REST error handler

Description

Environment

None

is duplicated by

relates to

Activity

Show:

Zac Spitzer 22 November 2020 at 19:33

Igal Sapir 22 November 2020 at 19:09

Calling the URI in the description now escapes the HTML and the message returned is:

Fixed

Details

Assignee

Reporter

Priority

Labels

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 28 August 2020 at 11:35
Updated 24 June 2024 at 14:44
Resolved 22 November 2020 at 19:09