Beveiligingsadvies

CVE-2022-42121

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-15 00:00:00

Laatst bijgewerkt 2026-07-09 00:21:51

Toegewezen door mitre

CVSS-score 8.8

Status PUBLISHED

Beschrijving

A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated attackers to execute arbitrary SQL commands via a crafted payload injected into a page template's 'Name' field.

← Alle CVE's bekijken Bekijk op cve.org ↗