-
Type: Bug
-
Status: Resolved
-
Priority: Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: 5.5.0-HF20, 5.6.0-HF29, 5.8.0-HF04, 5.9.1
-
Component/s: Web Common
There is a cross-site scripting issue in the login.jsp page, due to the use of an unescaped param.requestedUrl.