laptop and a wrench

Bug

Stored cross-site-scripting (XSS) in ArcGIS Web AppBuilder.

Last Published: February 18, 2021 Portal for ArcGIS
Bug ID Number BUG-000127472
SubmittedDecember 18, 2019
Last ModifiedFebruary 18, 2021
SeverityMedium
Applies toPortal for ArcGIS
Version found10.7.1
Operating SystemWindows
Operating System Version2019 64 Bit
Version Fixed10.8.1
StatusFixed

Workaround

The Portal for ArcGIS Security 2020 Update 2 Patch is now live on the support site. The URL is: https://support.esri.com/en/download/7837.

Steps to Reproduce

Bug ID: BUG-000127472

Software:

  • Portal for ArcGIS

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback