Lucene search
GoogleOSV:CVE-2023-47797HistoryNov 17, 2023 - 6:15 a.m.
CVE-2023-47797
2023-11-1706:15:34
Google
osv.dev
1
cve-2023-47797
reflected cross-site scripting
content page
liferay portal
remote attackers
arbitrary web script
html injection
p_l_back_url_title parameter
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
25.4%
Reflected cross-site scripting (XSS) vulnerability on a content page’s edit page in Liferay Portal 7.4.3.94 through 7.4.3.95 allows remote attackers to inject arbitrary web script or HTML via the p_l_back_url_title parameter.
Related
veracode
veracode
Cross-site Scripting (XSS)
2023-11-28 07:51:08
cve
cve
CVE-2023-47797
2023-11-17 06:15:34
github
github
Liferay Portal XSS with `p_l_back_url_title` on edit content page
2023-11-17 06:31:22
cvelist
cvelist
CVE-2023-47797
2023-11-17 06:03:00
prion
prion
Cross site scripting
2023-11-17 06:15:00
nessus
nessus
Liferay Portal 7.4.3.94 < 7.4.3.95 XSS
2023-11-29 00:00:00
osv
osv
Liferay Portal XSS with `p_l_back_url_title` on edit content page
2023-11-17 06:31:22
nvd
nvd
CVE-2023-47797
2023-11-17 06:15:34
9.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
25.4%
Related for OSV:CVE-2023-47797