cve.bz

CVE-2022-28977

6.1 mediumEPSS 0.6%

Medium (6.1) in liferay. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in com.liferay.portal:release.portal.bom 7.4.3.4-ga4.

HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect.

Severity

CVSS 3.1

6.1 medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
CWE
CWE-601
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-w397-9p2j-6x23Mavencom.liferay.portal:release.portal.bom>=7.3.1-ga2 <7.4.3.4-ga47.4.3.4-ga4
GHSA-w397-9p2j-6x23Mavencom.liferay.portal:release.dxp.bom>=7.0.10.fp91 <7.0.10.fp1017.0.10.fp101
GHSA-w397-9p2j-6x23Mavencom.liferay.portal:release.dxp.bom>=7.1.10.fp17 <7.1.10.fp257.1.10.fp25
GHSA-w397-9p2j-6x23Mavencom.liferay.portal:release.dxp.bom>=7.2.10.fp5 <7.2.10.fp147.2.10.fp14
GHSA-w397-9p2j-6x23Mavencom.liferay.portal:com.liferay.util.java<7.9.07.9.0

References

Check your stackJSON