Executive brief
Liferay Portal and Liferay DXP allows arbitrary injection via form field
Affected products
- Maven com.liferay.portal:release.dxp.bom
- Maven com.liferay:com.liferay.dynamic.data.mapping.form.field.type
Junglewise Threat Intelligence
CVE-2022-26594: Liferay Portal and Liferay DXP allows arbitrary injection via form field
CVE-2022-26594 · Severity: low · CVSS 3.1 · Published 2022-04-16
Technologies: com.liferay.portal:release.dxp.bom (Maven), com.liferay:com.liferay.dynamic.data.mapping.form.field.type (Maven). Vendors: Maven.
Related threats
- Liferay Portal Cross-site Scripting (XSS) vulnerability
- Liferay Portal vulnerable to Cross-site Scripting
- Liferay Portal users can upload an unlimited amount of files
- Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
- Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page