Open redirect

2024-02-2006:15:00

PRIOn knowledge base

www.prio-n.com

open redirect

liferay portal

vulnerability

remote attack

external urls

parameter-based attack

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.0%

JSON

Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect parameter.