[JBoss JIRA] (JBSEAM-5128) CLONE - Add session['class'] to EL blacklist - seam-issues

Thursday, 10 October 2013



     [
https://issues.jboss.org/browse/JBSEAM-5128?page=com.atlassian.jira.plugi...
]

Marek Novotny moved WFK2-204 to JBSEAM-5128:
--------------------------------------------

              Project: Seam 2  (was: JBoss WFK 2)
                  Key: JBSEAM-5128  (was: WFK2-204)
           Issue Type: Task  (was: Bug)
             Workflow: GIT Pull Request workflow   (was: CDW v1)
    Affects Version/s: 2.3.1.Final
                       2.3.0.Final
                           (was: 2.3.0.GA)
          Component/s: EL
                           (was: Seam 2)
             Security:     (was: JBoss Internal)
       Target Release:   (was: 2.4.0.GA)

    
...
 CLONE - Add session['class'] to EL blacklist
 --------------------------------------------

                 Key: JBSEAM-5128
                 URL: https://issues.jboss.org/browse/JBSEAM-5128
             Project: Seam 2
          Issue Type: Task
          Components: EL
    Affects Versions: 2.3.1.Final, 2.3.0.Final
            Reporter: David Jorm
            Assignee: Marek Novotny
            Priority: Critical

 As a hardening measure, add session['class'] to EL blacklist to protect against
EL remote code execution attacks. 
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

[JBoss JIRA] (JBSEAM-5128) CLONE - Add session['class'] to EL blacklist