Skip to content
OpenAdvisories
High WID-SEC-2024-0440 16 CVEs

Liferay Portal und Liferay DXP: Mehrere Schwachstellen

Published Feb 20, 2024 · Updated Feb 20, 2024 · de-DE

Vendor: Liferay Product: DXP Product: Portal

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff zu starten, vertrauliche Informationen offenzulegen oder Dateien zu manipulieren.

Product

Liferay Portal ist eine Open-Source-Webplattform für Unternehmen, die ein Framework für die Erstellung und Verwaltung von webbasierten Anwendungen und Inhalten bietet.
Liferay DXP (Digital Experience Platform) ist eine erweiterte und kommerziell unterstützte Version von Liferay Portal, die zusätzliche Funktionen und Dienste bietet.

Vulnerabilities 16

  • Critical 9.6
    CVE-2023-42496

    Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

    Reflected cross-site scripting (XSS) vulnerability on the add assignees to a role page in Liferay Portal 7.3.3 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, 7.4 GA through update 92, and 7.3 before update 34 allows remote attackers to inject arbit…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.6
    CVE-2023-42498

    Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting

    Reflected cross-site scripting (XSS) vulnerability in the Language Override edit screen in Liferay Portal 7.4.3.8 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 4 through 92 allows remote attackers to inject arbitrary web script or H…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.6
    CVE-2024-26269

    Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting

    Cross-site scripting (XSS) vulnerability in the Frontend JS module's portlet.js in Liferay Portal 7.2.0 through 7.4.3.37, and Liferay DXP 7.4 before update 38, 7.3 before update 11, 7.2 before fix pack 20, and older unsupported versions allows remote attacker…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2023-40191

    Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting

    Reflected cross-site scripting (XSS) vulnerability in the instance settings for Accounts in Liferay Portal 7.4.3.44 through 7.4.3.97, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 44 through 92 allows remote attackers to inject arbitrary web script o…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-25152

    Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in Message Board widget in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions allows remote auth…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-25601

    Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in Expando module's geolocation custom fields in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versi…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-25602

    Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in Users Admin module's edit user page in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions all…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-25603

    Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting

    Stored cross-site scripting (XSS) vulnerability in the Dynamic Data Mapping module's DDMForm in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported ve…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-25610

    Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)

    In Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions, the default configuration does not sanitize blog entries of JavaScript,…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Critical 9.0
    CVE-2024-26266

    Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting

    Multiple stored cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.2.0 through 7.4.3.13, and older unsupported versions, and Liferay DXP 7.4 before update 10, 7.3 before update 4, 7.2 before fix pack 17, and older unsupported versions allow remote…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.5
    CVE-2024-26270

    Liferay Portal and Liferay DXP vulnerable to theft of hashed password

    The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 embeds the user’s hashed password in the page’s HTML source, which allows man-in-the-middle attackers to steal a user's…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 6.1
    CVE-2024-25609

    Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes

    HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slas…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.4
    CVE-2024-25151

    Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing

    The Calendar module in Liferay Portal 7.2.0 through 7.4.2, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not escape user supplied data in the default notification email t…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2024-26267

    Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

    In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.3
    CVE-2024-26268

    Liferay Portal and Liferay DXP User Enumeration Vulnerability

    User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if …

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven
  • Medium 5.0
    CVE-2024-26265

    Liferay Portal vulnerable to Denial of Service

    The Image Uploader module in Liferay Portal 7.2.0 through 7.4.3.15, and older unsupported versions, and Liferay DXP 7.4 before update 16, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions relies on a request parameter to limit the si…

    Liferay DXP Portal com.liferay.portal:release.portal.bom Maven

Revision history

  1. #1

    Initiale Fassung

References