DeutschShown in its original language — a full translation is planned for a future version.
Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting
view advisory published 2023-10-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-44311US | medium6.1 | — | ||
Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 through 7.4.3.… | ||||
| CVE-2023-44310US | medium5.4 | — | ||
Stored cross-site scripting (XSS) vulnerability in Page Tree menu Liferay Portal 7.3.6 through 7.4.3.78, and Liferay DXP 7.3 fix pack 1 through update 23, and 7.4 before update 79… | ||||
| CVE-2023-44309US | medium5.4 | — | ||
Multiple stored cross-site scripting (XSS) vulnerabilities in the fragment components in Liferay Portal 7.4.2 through 7.4.3.53, and Liferay DXP 7.4 before update 54 allow remote at… | ||||
| CVE-2023-42629US | medium5.4 | — | ||
Stored cross-site scripting (XSS) vulnerability in the manage vocabulary page in Liferay Portal 7.4.2 through 7.4.3.87, and Liferay DXP 7.4 before update 88 allows remote attackers… | ||||
| CVE-2023-42497US | medium6.1 | — | ||
Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote… | ||||
02
references
External citations — patches, advisories, analysis.
- Liferay Security Advisory vom 2023-10-16external
- Liferay Security Advisory vom 2023-10-16external
- Liferay Security Advisory vom 2023-10-16external
- Liferay Security Advisory vom 2023-10-16external
- Liferay Security Advisory vom 2023-10-16external
- WID-SEC-W-2023-2670 - CSAF Versionself
- WID-SEC-2023-2670 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan