PT-2023-28457 · Liferay · Liferay Dxp+1

Michael Oelke · Published 2023-10-17 · Updated 2024-01-31 · CVE-2023-42629

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.4.2 through 7.4.3.87 Liferay DXP 7.4 before update 88

Description A stored cross-site scripting (XSS) issue exists in the manage vocabulary page, allowing remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a Vocabulary's description text field.

Recommendations For Liferay Portal versions 7.4.2 through 7.4.3.87, update to a version after 7.4.3.87 to resolve the issue. For Liferay DXP 7.4 before update 88, apply update 88 or later to fix the vulnerability. As a temporary workaround, consider restricting access to the manage vocabulary page until a patch is available. Avoid using the description text field in the affected page until the issue is resolved.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BIT-LIFERAY-2023-42629

CVE-2023-42629

GHSA-G44J-F8WM-6622

Affected Products

Liferay Dxp

Liferay Portal

References · 10

• 🔥 https://pentagrid.ch/en/blog/stored-cross-site-scripting-vulnerabilities-in-liferay-portal · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2023-42629 · Security Note
• https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-42629 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-g44j-f8wm-6622 · Vendor Advisory
• https://osv.dev/vulnerability/BIT-liferay-2023-42629 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-42629 · Vendor Advisory
• https://github.com/liferay/liferay-portal · Note
• https://github.com/liferay/liferay-portal/commit/2e02110747dd5cccb978623545bfa1f3ad0a5602 · Note
• https://twitter.com/CVEnew/status/1714199626092564561 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1714228175310356650 · Twitter Post