Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.headless.discovery.web

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2022-28981

    Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module

    Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.

    com.liferay:com.liferay.headless.discovery.web Maven