CVE-2023-44311

🗓️ 17 Oct 2023 10:15:09Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Multiple reflected cross-site scripting vulnerabilities in Liferay Portal 7.4.3.41 to 7.4.3.89 and Liferay DXP 7.4 update 41 to 89 allow remote attackers to inject arbitrary web script or HTML via code or error parameter. Caused by incomplete fix in CVE-2023-33941.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-44311	17 Oct 202314:32	–	circl
CNNVD	Liferay Portal and Liferay DXP Cross-Site Scripting Vulnerabilities	17 Oct 202300:00	–	cnnvd
CVE	CVE-2023-44311	17 Oct 202309:39	–	cve
Cvelist	CVE-2023-44311	17 Oct 202309:39	–	cvelist
EUVD	EUVD-2023-48667	3 Oct 202520:07	–	euvd
Github Security Blog	Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class	17 Oct 202312:30	–	github
NVD	CVE-2023-44311	17 Oct 202310:15	–	nvd
OSV	BIT-2023-44311	25 Oct 202306:20	–	osv
OSV	BIT-LIFERAY-2023-44311	31 Jan 202415:16	–	osv
OSV	GHSA-49GM-5685-8FXV Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class	17 Oct 202312:30	–	osv