Skip to content
OpenAdvisories
High WID-SEC-2024-0428 9 CVEs

Liferay Portal und DXP: Mehrere Schwachstellen

Published Feb 19, 2024 · Updated Mar 18, 2024 · Revision 2 · de-DE

Vendor: Liferay Product: DXP Product: Portal

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.

Product

Liferay DXP (Digital Experience Platform) ist eine erweiterte und kommerziell unterstützte Version von Liferay Portal, die zusätzliche Funktionen und Dienste bietet.
Liferay Portal ist eine Open-Source-Webplattform für Unternehmen, die ein Framework für die Erstellung und Verwaltung von webbasierten Anwendungen und Inhalten bietet.

Vulnerabilities 9

  • High 8.1
    CVE-2024-25607

    Liferay Portal defaults to a low work factor for the default password hashing algorithm

    The default password hashing algorithm (PBKDF2-HMAC-SHA1) in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions defaults to a…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • High 8.0
    CVE-2024-25606

    Liferay Portal has an XXE vulnerability in Java2WsddTask._format

    XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, and Liferay DXP 7.4 before update 4, 7.3 before update 12, 7.2 before fix pack 20, and older unsupported versions allows attackers with permission to deploy widgets/por…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.5
    CVE-2024-25604

    Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions

    Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users w…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.1
    CVE-2023-44308

    Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page

    Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortle…

    Liferay DXP com.liferay:com.liferay.adaptive.media.web Maven
  • Medium 6.1
    CVE-2023-5190

    Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page

    Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs …

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.1
    CVE-2024-25608 Scanner template

    Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

    HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT C…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.4
    CVE-2024-25149

    Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options

    Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not properly restrict membership of a child site when the "Limit membership to members o…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2024-25605

    Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API

    The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates b…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 4.3
    CVE-2024-25150

    Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel

    Information disclosure vulnerability in the Control Panel in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions allows remote authenticated users to o…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven

Revision history

  1. #2

    doppelten Eintrag entfernt

  2. #1

    Initiale Fassung

References