-
Type:
Bug
-
Resolution: Fixed
-
Priority:
Medium
-
Affects Version/s: 2.0.3, 2.1.5, 2.2.10, 2.3.3, 2.4.5, 2.5.8, 2.6.2, 2.7.2
-
Component/s: None
Vulnerable URL's:
- signup.action
- dosignup.action
on username, email, password, confirm, fullname
- is blocked by
-
CONFSERVER-9627 Velocity does not automatically escape HTML entities when substituting variables
-
- Closed
-