-
Type: Bug
-
Status: Resolved
-
Priority: Critical
-
Resolution: Fixed
-
Affects Version/s: 5.6, 5.8
-
Fix Version/s: 5.6.0-HF32, 5.8.0-HF09, 5.9.3
-
Component/s: Seam / JSF UI
nuxeo_error.jsp and nuxeo_error_security.jsp don't properly escape their output which makes possible some cross-site scripting (XSS).
- depends on
-
NXBT-704 Maven must report functional test failure
- Resolved