How severe is CVE-2007-6173?

The severity of CVE-2007-6173 has not been assessed with CVSS v3.

CVE-2007-6173

Name: liferay_enterprise_portal
Author: liferay

NONE

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send Ne

公開日: 11/30/2007更新日: 4/9/2025

説明

Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary web script or HTML via the emailAddress parameter in a Send New Password action, a different vector than CVE-2007-6055. NOTE: some of these details are obtained from third party information.

AI分析AIによる分析

影響を受ける製品

liferayliferay_enterprise_portal

4.3.1

説明

AI分析AIによる分析

影響を受ける製品

利用可能なエクスプロイト (1)

Liferay Portal 4.3.1 - Forgot-Password Cross-Site Scripting

参照