CVE-2019-6588
03.06.2019, 20:29
In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:captcha url="<%= url %>" />. Liferay Portal out-of-the-box behavior with no customizations is not vulnerable.
| Vendor | Product | Version |
|---|---|---|
| liferay | liferay_portal | 𝑥 ≤ 6.0.6 |
| liferay | liferay_portal | 6.1.0:b1 |
| liferay | liferay_portal | 6.1.0:b2 |
| liferay | liferay_portal | 6.1.0:b3 |
| liferay | liferay_portal | 6.1.0:b4 |
| liferay | liferay_portal | 6.1.0:ga1 |
| liferay | liferay_portal | 6.1.0:rc1 |
| liferay | liferay_portal | 6.1.1:ga2 |
| liferay | liferay_portal | 6.1.2:ga3 |
| liferay | liferay_portal | 6.2.0:b1 |
| liferay | liferay_portal | 6.2.0:b2 |
| liferay | liferay_portal | 6.2.0:ga1 |
| liferay | liferay_portal | 6.2.0:m1 |
| liferay | liferay_portal | 6.2.0:m2 |
| liferay | liferay_portal | 6.2.0:m3 |
| liferay | liferay_portal | 6.2.0:m4 |
| liferay | liferay_portal | 6.2.0:m5 |
| liferay | liferay_portal | 6.2.0:m6 |
| liferay | liferay_portal | 6.2.0:rc1 |
| liferay | liferay_portal | 6.2.0:rc2 |
| liferay | liferay_portal | 6.2.0:rc3 |
| liferay | liferay_portal | 6.2.0:rc4 |
| liferay | liferay_portal | 6.2.0:rc5 |
| liferay | liferay_portal | 6.2.0:rc6 |
| liferay | liferay_portal | 6.2.1:ga2 |
| liferay | liferay_portal | 6.2.2:ga3 |
| liferay | liferay_portal | 6.2.3:ga4 |
| liferay | liferay_portal | 6.2.4:ga5 |
| liferay | liferay_portal | 6.2.5:ga6 |
| liferay | liferay_portal | 7.0.0:a1 |
| liferay | liferay_portal | 7.0.0:a2 |
| liferay | liferay_portal | 7.0.0:a3 |
| liferay | liferay_portal | 7.0.0:a4 |
| liferay | liferay_portal | 7.0.0:a5 |
| liferay | liferay_portal | 7.0.0:b1 |
| liferay | liferay_portal | 7.0.0:b2 |
| liferay | liferay_portal | 7.0.0:b3 |
| liferay | liferay_portal | 7.0.0:b4 |
| liferay | liferay_portal | 7.0.0:b5 |
| liferay | liferay_portal | 7.0.0:b6 |
| liferay | liferay_portal | 7.0.0:b7 |
| liferay | liferay_portal | 7.0.0:ga1 |
| liferay | liferay_portal | 7.0.0:m1 |
| liferay | liferay_portal | 7.0.0:m2 |
| liferay | liferay_portal | 7.0.0:m3 |
| liferay | liferay_portal | 7.0.0:m4 |
| liferay | liferay_portal | 7.0.0:m5 |
| liferay | liferay_portal | 7.0.0:m6 |
| liferay | liferay_portal | 7.0.0:m7 |
| liferay | liferay_portal | 7.0.1:ga2 |
| liferay | liferay_portal | 7.0.2:ga3 |
| liferay | liferay_portal | 7.0.3:ga4 |
| liferay | liferay_portal | 7.0.4:ga5 |
| liferay | liferay_portal | 7.0.5:ga6 |
| liferay | liferay_portal | 7.0.6:ga7 |
| liferay | liferay_portal | 7.1.0:a1 |
| liferay | liferay_portal | 7.1.0:a2 |
| liferay | liferay_portal | 7.1.0:b1 |
| liferay | liferay_portal | 7.1.0:b2 |
| liferay | liferay_portal | 7.1.0:b3 |
| liferay | liferay_portal | 7.1.0:ga1 |
| liferay | liferay_portal | 7.1.0:m1 |
| liferay | liferay_portal | 7.1.0:m2 |
| liferay | liferay_portal | 7.1.0:rc1 |
𝑥
= Vulnerable software versions
References