xss
Hi everybody recently we have found that when creating a user, Nuxeo allows you to set some fields like firstName or lastName with HTML code. See examples below: curl -X POST -H "Content-Type: application/json" -u Administrator:Administrator -d '{ ...
 |
Paco Alías
Member (699) 1 3 4 |
01/18/2016 |
Answer: Hi, The problem with the results in the top-right search box for a compromised user name (or document title in some situations) is fixed for the next releases and hotfixes (6.0-HF26, 7.10-HF04, 8.1). Our internal reference for this is NXP-18833 (the ...
2 votes
2 answers
7 comments
3708 views