CVE-2022-42125

2022-11-1500:00:00

mitre

www.cve.org

cve-2022-42125

fileutil.unzip

liferay portal

liferay dxp

plugin/module deployment

filesystem vulnerability

EPSS

0.001

Percentile

45.1%

JSON

Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through update 34 allows attackers to create or overwrite existing files on the filesystem via the deployment of a malicious plugin/module.