Security Advisory

CVE-2022-28981

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-22 00:06:35

Last updated 2025-05-27 17:49:21

Assigner mitre

State PUBLISHED

Description

Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.

← Browse all CVEs View on cve.org ↗