Skip to content
OpenAdvisories
High WID-SEC-2024-0323 8 CVEs

Liferay Liferay Portal und DXP: Mehrere Schwachstellen

Published Feb 7, 2024 · Updated Feb 7, 2024 · de-DE

Vendor: Liferay Product: DXP Product: Portal Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.

Product

Liferay Portal ist eine Open-Source-Webplattform für Unternehmen, die ein Framework für die Erstellung und Verwaltung von webbasierten Anwendungen und Inhalten bietet.
Liferay DXP (Digital Experience Platform) ist eine erweiterte und kommerziell unterstützte Version von Liferay Portal, die zusätzliche Funktionen und Dienste bietet.

Vulnerabilities 8

  • Critical 9.6
    CVE-2024-25145

    Liferay Portal stored cross-site scripting (XSS) vulnerability

    Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app in Liferay Portal 7.2.0 through 7.4.3.11, and older unsupported versions, and Liferay DXP 7.4 before update 8, 7.3 before update 4, 7.2 before fix pack 17, and old…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • High 8.8
    CVE-2021-29050

    Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

    Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and ent…

    com.liferay.portal:release.dxp.bom com.liferay.portal:com.liferay.portal.impl Maven
  • Medium 6.5
    CVE-2024-25143

    Liferay Portal denial of service (memory consumption)

    The Document and Media widget In Liferay Portal 7.2.0 through 7.3.6, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 13, and older unsupported versions, does not limit resource consumption when generating a previ…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.3
    CVE-2021-29038

    Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

    Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-th…

    com.liferay.portal:release.dxp.bom com.liferay:com.liferay.login.web com.liferay:com.liferay.users.admin.web com.liferay.portal:portal-impl Maven
  • Medium 5.4
    CVE-2023-47798

    Liferay Portal's account lockout does not invalidate existing user sessions

    Account lockout in Liferay Portal 7.2.0 through 7.3.0, and older unsupported versions, and Liferay DXP 7.2 before fix pack 5, and older unsupported versions does not invalidate existing user sessions, which allows remote authenticated users to remain authenti…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.4
    CVE-2024-25148

    Liferay Portal vulnerable to user impersonation

    In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter may get leaked when creating linked content using the WYSIW…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2024-25146

    Liferay Portal allows attackers to discover the existence of sites

    Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and older unsupported versions returns with different responses depending on whether a site does not exist or if the user do…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 4.1
    CVE-2024-25144

    Liferay Portal denial-of-service vulnerability

    The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows re…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven

Revision history

  1. #1

    Initiale Fassung

References