[XRAY-6670] XSS - Test Repository/Test Plan - Filter - through "Contains Text" - Xblend Issue Tracker

Xporter

XML

Word

Printable

Details

Type: Bug
Status: Closed
Priority: Major
Resolution: Done
Affects Version/s: None
Fix Version/s: 4.2.3
Component/s: Security
Labels:
- ignore_ait
- security_vulnerability_medium

Sprint:
XRAY 2020 Sprint 8
Requirement Status:
OK
- 1

Description

Go to Test Repository/Test Plan using the side bar;
Click on Filter;
In "Contains Text" enter: <script>alert("project")</script> --> Click on "Apply" button.

Popup appears:

Attachments

Attachments

- Sort By Name
- Sort By Date
- Ascending
- Descending
- Thumbnails
- List
- Download All

image-2020-10-29-12-20-15-836.png
131 kB
29/Oct/20 12:20 PM

Activity

People

Assignee:: Diamantino Campos

Reporter:: Chandani Narendra [X] (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 29/Oct/20 12:21 PM

Updated:: 09/Dec/20 2:22 PM

Resolved:: 09/Dec/20 2:22 PM

Time Tracking

Estimated:

Not Specified

Remaining:

0m

Logged:

1h 10m