laptop and a wrench

Bug

There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.

Last Published: February 7, 2023 ArcGIS Online
Bug ID Number BUG-000154236
SubmittedDecember 6, 2022
Last ModifiedJuly 18, 2023
Applies toArcGIS Online
Version foundN/A
Operating SystemN/A
Operating System VersionN/A
Version FixedPlanned Release Date: Q1 2023
StatusFixed

Additional Information

The Portal for ArcGIS Security 2023 Update 1 Patch is now live on the support site. This is a four-version patch for 10.7.1, 10.8.1, 10.9.1, and 11.0 which addresses both security and non-security issues. Refer to: https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095. Refer to the 'Issues addressed with this patch' section of the patch download page for details on which versions are affected and resolved for each defect.

Workaround

The Portal for ArcGIS Security 2023 Update 1 Patch is now live on the support site. Refer to: https://support.esri.com/en-us/patches-updates/2023/portal-for-arcgis-security-2023-update-1-patch-8095.

Steps to Reproduce

Bug ID: BUG-000154236

Software:

  • ArcGIS Online

Get help from ArcGIS experts

Contact technical support

Download the Esri Support App

Go to download options

Discover more on this topic

Esri Community

Search for related information

Training

Find training related to this topic

ArcGIS Ideas

Explore ideas and give feedback