Junglewise Threat Intelligence

CVE-2022-28980: Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix

CVE-2022-28980 · Severity: low · CVSS 3.1 · Published 2022-09-23

Technologies: com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.

Executive brief

Liferay Portal and Liferay DXP Vulnerable to XSS via the filter_ Prefix

Affected products

  • Maven com.liferay.portal:release.dxp.bom
  • Maven com.liferay:com.liferay.fragment.renderer.collection.filter.impl

Related threats