Junglewise Threat Intelligence
CVE-2022-42122: Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
CVE-2022-42122 · Severity: low · CVSS 3.1 · Published 2022-11-15
Technologies: com.liferay.portal:release.portal.bom (Maven), com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.
Executive brief
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via Friendly URL Module
Affected products
- Maven com.liferay.portal:release.portal.bom
- Maven com.liferay.portal:release.dxp.bom
- Maven com.liferay:com.liferay.friendly.url.service