PT-2022-17946 · Liferay · Liferay Portal+1

Duy Huynh · Published 2022-04-19 · Updated 2024-01-31 · CVE-2022-26593

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.3 through 7.4.0 Liferay DXP 7.3 before service pack 3

Description A cross-site scripting (XSS) issue exists in the Asset module's asset categories selector, allowing remote attackers to inject arbitrary web script or HTML via the name of an asset category.

Recommendations For Liferay Portal versions 7.3.3 through 7.4.0, update to a version outside of this range to resolve the issue. For Liferay DXP 7.3 before service pack 3, apply service pack 3 or later to fix the vulnerability. As a temporary workaround, consider restricting access to the Asset module's asset categories selector until a patch is available.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-LIFERAY-2022-26593

CVE-2022-26593

GHSA-Q2RP-XFJ8-R95H

Affected Products

Liferay Dxp

Liferay Portal

References · 13

• https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-26593-stored-xss-with-category-name-in-asset-categories-selector · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26593 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26593 · Vendor Advisory
• http://liferay.com · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-q2rp-xfj8-r95h · Vendor Advisory
• https://osv.dev/vulnerability/BIT-liferay-2022-26593 · Vendor Advisory
• https://github.com/liferay/liferay-portal · Note
• https://github.com/liferay/liferay-portal/commit/811d894cb079aba3644771a70cd9a2dfd36b945d · Note
• https://t.me/cvenotify/29422 · Telegram Post
• https://t.me/cvenotify/29148 · Telegram Post
• https://t.me/cibsecurity/41093 · Telegram Post
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-26593-stored-xss-with-category-name-in-asset-categories-selector?p_r_p_assetEntryId=121612145&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121612145%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse · Note
• https://liferay.atlassian.net/issues/LPE-17284 · Note