Web Security Risk: Injection Link Possible
(Doc ID 1447320.1)
Last updated on SEPTEMBER 27, 2022
Applies to:
Oracle Utilities Energy Information Platform - Version 1.5.0 and laterInformation in this document applies to any platform.
Symptoms
=== ODM Issue Clarification ===
A security audit on the website has uncovered a high security risk: it is possible on some standard pages to inject a link in the request (called "Injection link" risk).
For example on url: https://intcdm.grtgaz.com/lodestar/Classic/DataTools/genoptions/intervaldata.asp using parameter UserLevel
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Cause |
Solution |
References |