Liferay Portal and Liferay DXP Open Redirect Vulnerability

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform. Liferay Portal and Liferay DXP are open redirection vulnerabilities that can be exploited to redirect users to arbitrary external URLs via the " redirect" parameter to redirect users to an arbitrary external url.