-
Type:
Bug
-
Status: Open
-
Priority:
Medium
-
Resolution: Unresolved
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: None
-
Labels:
-
Environment:Production
-
Bug Severity:Low
-
Module:BenAdmin - Security
-
Reported by:Harbinger
[Security Test]
{Input Validation}Server Error gets displayed as soon as any Script is inserted in Template Name field.
1. Login as Admin
2. Go to Beta Company 1
3. Go to Import/Export -> Template Management
4. Click on Add New button to add new template
5. Insert following script data into Name field.
<html>Helll<script>alert('Attacked')</script></html>
6. Check for the server error displayed.
| Field | Original Value | New Value |
|---|---|---|
| Module | Parent values: BenAdmin(10100) | Parent values: BenAdmin(10100)Level 1 values: Security(10112) |
| Environment | Production [ 10005 ] | |
| Severity | Medium [ 13102 ] |
| Issue Category | EBS [ 10350 ] | Harbinger [ 10700 ] |
| Bug Severity | Low [ 16703 ] |
| Labels | Security |
| Environment_New | Production [ 18442 ] |
| Link | This issue relates to DEV-13718 [ DEV-13718 ] |