Description
In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter may get leaked when creating linked content using the WYSIWYG editor and while impersonating a user. This may allow remote authenticated users to impersonate a user after accessing the linked content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Liferay | Portal | 7.2.0 – ≤ 7.4.1 | — |
| Liferay | DXP | 7.3.10 – ≤ 7.3.10-dxp-2, 7.2.10 – ≤ 7.2.10-dxp-14 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.liferay.portal:release.dxp.bom | >= 7.2.0, < 7.2.10.fp15 | 7.2.10.fp15 | GHSA-qwj8-qgpr-8crm |
| Maven | com.liferay.portal:release.dxp.bom | >= 7.3.0, < 7.3.10.u4 | 7.3.10.u4 | GHSA-qwj8-qgpr-8crm |
| Maven | com.liferay.portal:release.portal.bom | >= 7.2.0, < 7.4.2 | 7.4.2 | GHSA-qwj8-qgpr-8crm |
Advisories 1
- WID-SEC-2024-0323 Liferay Liferay Portal und DXP: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 7, 2024