CVE-2019-6588
MEDIUMLiferay Portal < 7.1 CE GA4 - Cross-Site Scripting via SimpleCaptcha URL Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-6588. PoCs published by Valerio Brussani.
AI-analyzed exploit summary This exploit demonstrates an XSS vulnerability in Liferay Portal's SimpleCaptcha API by injecting a script payload into the 'url' parameter of the JSP taglib call. The payload is reflected in the 'src' attribute of an 'img' tag, triggering the XSS.
Description
In Liferay Portal before 7.1 CE GA4, an XSS vulnerability exists in the SimpleCaptcha API when custom code passes unsanitized input into the "url" parameter of the JSP taglib call <liferay-ui:captcha url="<%= url %>" /> or <liferay-captcha:captcha url="<%= url %>" />. Liferay Portal out-of-the-box behavior with no customizations is not vulnerable.
Exploits (1)
This exploit demonstrates an XSS vulnerability in Liferay Portal's SimpleCaptcha API by injecting a script payload into the 'url' parameter of the JSP taglib call. The payload is reflected in the 'src' attribute of an 'img' tag, triggering the XSS.
References (2)
Scores
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N