Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
org.jasig.portal:uPortal-security-mvc
Advanced tools
Enterprise open source portal built by and for the higher education community.
|
|
uPortal is the leading open source enterprise portal framework built by and for the higher education community. uPortal continues to evolve through contributions from its global community and is supported by resources, grants, donations, and memberships fees from academic institutions, commercial affiliates, and non-profit foundations. uPortal is built on open standards-based technologies such as Java and XML, and enables easy, standards-based integration with authentication and security infrastructures, single sign-on secure access, campus applications, web-based content, and end user customization. uPortal can easily integrate with other enterprise systems and can be customized for specific local needs.
You may download uPortal and use it on your site at no cost. Unlike our competitors, uPortal is 100% free open source software managed by Apereo. Our community has access to all releases of the uPortal software with absolutely no costs. We welcome contributions from our community of all types and sizes.
uPortal strives to conform with Web Content Accessibility Guidelines Version 2.0 Level AA. The most recent accessibility audit results can be seen in UP-4735.
The uportal-user@apereo.org email address is the best place to go with questions related to configuring or deploying uPortal.
The uPortal manual is a collaborative resource which has more detailed documentation for each uPortal release.
Additional information about uPortal is available in the Manual.
uPortal is now meant to be deployed via uPortal-start, which is responsible for servlet container (ie Tomcat), DB, and portal configurations. uPortal-start deals with the low-level configurations and setup, while letting the adopter focus on the business configuration side of the deployment. However, it is possible to run uPortal without uPortal-start. The uPortal manual explains how.
uPortal uses Gradle for its project configuration and build system. uPortal
comes with a Gradle wrapper if you don't want to install the build tool
(./gradlew
in the root directory of the repo).
For a full list of Gradle tasks run ./gradlew tasks
from the root directory.
FAQs
Enterprise open source portal built by and for the higher education community.
We found that org.jasig.portal:uPortal-security-mvc demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.