Lucene search
HistorySep 22, 2022 - 12:15 a.m.
CVE-2022-28982
cve-2022-28982
cross-site scripting
xss
liferay portal
liferay dxp
security vulnerability
web security
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.6%
A cross-site scripting (XSS) vulnerability in Liferay Portal v7.3.3 through v7.4.2 and Liferay DXP v7.3 before service pack 3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name of a tag.
Affected configurations
Node
liferaydxpMatch7.3-
ORliferaydxpMatch7.3sp1
ORliferaydxpMatch7.3sp2
ORliferaydxpMatch7.3sp3
ORliferayliferay_portalRange7.3.3–7.4.3.4
| CPE | Name | Operator | Version |
|---|---|---|---|
| liferay:dxp | liferay dxp | eq | 7.3 |
| liferay:liferay_portal | liferay liferay portal | lt | 7.4.3.4 |
References
Social References
More
Related
nvd
nvd
CVE-2022-28982
2022-09-22 00:15:09
prion
prion
Cross site scripting
2022-09-22 00:15:00
cvelist
cvelist
CVE-2022-28982
2022-09-21 23:57:41
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
33.6%
Related for CVE-2022-28982