| Package | Affected versions | Patched versions |
|---|---|---|
| com.liferay.portal:release.portal.bom | ≥ 7.3.2, < 7.4.3.5 | 7.4.3.5 |
| digital experience platform | = 7.2= 7.3= 7.4 | |
| liferay portal | ≥ 7.3.2, < 7.4.3.5 | 7.4.3.5 |
ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2 fix pack 9 through fix pack 18, 7.3 before update 4, and DXP 7.4 GA allows remote attackers to consume an excessive amount of server resources via a crafted payload injected into the 'name' field of a layout prototype.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free