PT-2022-19340 · Liferay · Liferay Portal+1

Published 2022-09-22 · Updated 2022-09-26 · CVE-2022-28980

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Liferay Portal version 7.4.3.4 Liferay DXP version 7.4 GA

Description The issue allows attackers to execute arbitrary web scripts or HTML via parameters with the filter prefix. This enables the execution of malicious scripts, potentially leading to unauthorized actions on the affected system.

Recommendations For Liferay Portal version 7.4.3.4, update to a version that includes the fix for this issue. For Liferay DXP version 7.4 GA, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to parameters with the filter prefix to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-28980

GHSA-8MP9-W7GR-PVJ3

Affected Products

Liferay Dxp

Liferay Portal

References · 11

• https://osv.dev/vulnerability/CVE-2022-28980 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-28980 · Security Note
• https://osv.dev/vulnerability/GHSA-8mp9-w7gr-pvj3 · Vendor Advisory
• https://github.com/liferay/liferay-portal · Note
• https://github.com/liferay/liferay-portal/commit/b4ea3e9acb6c3602b9c90538ba35f11906dc07ed · Note
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-28980-reflected-xss-with-filter_-parameters-in-applied-fragment-filters?p_r_p_assetEntryId=121612438&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121612438%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse · Note
• https://liferay.atlassian.net/browse/LPE-17420 · Note
• https://t.me/cibsecurity/50254 · Telegram Post
• https://web.archive.org/web/20221114081624/https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28980-reflected-xss-with-filter_*-parameters-in-applied-fragment-filters · Note
• https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28980-reflected-xss-with-filter_%2A-parameters-in-applied-fragment-filters · Note
• http://liferay.com · Note