CVE-2022-38902

Mô tả

Tham khảo

• drive.proton.me/urls/D27RQ14NGW · Third Party Advisory
• offensity.com/en/blog/authenticated-persistent-xss-in-liferay-dxp-cms-cve-2022-38901-and-cve-2022-38902 · Exploit

Lỗ hổng khác của dxp

• CVE-2024-25148CAO 8.1In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, an…
• CVE-2024-25146TRUNG BÌNH 5.3Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 18, and o…
• CVE-2024-25144TRUNG BÌNH 6.5The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before…
• CVE-2024-25145TRUNG BÌNH 5.4Stored cross-site scripting (XSS) vulnerability in the Portal Search module's Search Result app in Liferay Portal 7.2.0 through 7.4.3.11, an…
• CVE-2023-35030CAO 8.8Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Li…