Executive brief
Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
Affected products
- Maven com.liferay.portal:release.dxp.bom
- Maven com.liferay:com.liferay.oauth2.provider.rest
Junglewise Threat Intelligence
CVE-2023-44311: Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
CVE-2023-44311 · Severity: low · CVSS 3.1 · Published 2023-10-17
Technologies: com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.
Related threats
- Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
- Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
- Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API
- Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options
- Liferay Portal's account lockout does not invalidate existing user sessions