6.1

CVE-2022-28977

HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Liferay ≫ Digital Experience Platform Version 7.0 Update -
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_100
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_101
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_91
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_92
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_93
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_94
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_95
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_96
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_97
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_98
Liferay ≫ Digital Experience Platform Version 7.0 Update fix_pack_99
Liferay ≫ Digital Experience Platform Version 7.1 Update -
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_17
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_18
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_19
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_20
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_21
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_22
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_23
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_24
Liferay ≫ Digital Experience Platform Version 7.1 Update fix_pack_25
Liferay ≫ Digital Experience Platform Version 7.2 Update -
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_10
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_11
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_12
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_13
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_14
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_5
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_6
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_7
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_8
Liferay ≫ Digital Experience Platform Version 7.2 Update fix_pack_9
Liferay ≫ Dxp Version 7.3 Update -
Liferay ≫ Dxp Version 7.3 Update sp1
Liferay ≫ Dxp Version 7.3 Update sp2
Liferay ≫ Liferay Portal Version >= 7.3.1 < 7.4.3.4
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.46% 0.373
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CISA-ADP 6.1 2.8 2.7
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CWE-601 URL Redirection to Untrusted Site ('Open Redirect')

The web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a redirect.

https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28977-htmlutil.escaperedirect-circumvention-with-multiple-forward-slash
Patch
Vendor Advisory