Executive brief
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
Affected products
- Maven com.liferay.portal:release.portal.bom
- Maven com.liferay.portal:release.dxp.bom
Junglewise Threat Intelligence
CVE-2021-29045: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the Redirect's Admin Page
CVE-2021-29045 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: com.liferay.portal:release.portal.bom (Maven), com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.
Related threats
- Liferay Portal Vulnerable to Reflected XSS via the selectedLanguageId Parameter
- Liferay Portal is vulnerable to XSS in the Blogs widget
- Liferay Portal is vulnerable to DNS rebinding attacks
- Liferay Portal vulnerable to password enumeration
- Liferay Portal Vulnerable to DoS via Crafted Headless API Request