PT-2022-19341 · Liferay · Liferay Portal

🗓️ 22 Sep 2022 00:00:00Reported by Positive TechnologiesType

Path traversal vulnerability in Liferay Hypermedia REST APIs may allow remote file access in Portal versions 7.4.0 to 7.4.2 via the parameter field.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-28981	22 Sep 202207:11	–	circl
CNNVD	Liferay Portal 路径遍历漏洞	22 Sep 202200:00	–	cnnvd
CVE	CVE-2022-28981	22 Sep 202200:06	–	cve
Cvelist	CVE-2022-28981	22 Sep 202200:06	–	cvelist
EUVD	EUVD-2022-33412	3 Oct 202520:07	–	euvd
Github Security Blog	Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module	23 Sep 202200:00	–	github
NVD	CVE-2022-28981	22 Sep 202201:15	–	nvd
OSV	CVE-2022-28981	22 Sep 202201:15	–	osv
OSV	GHSA-5J86-VMPX-42PC Liferay Portal Path Traversal Vulnerability via the Hypermedia REST APIs Module	23 Sep 202200:00	–	osv
Prion	Path traversal	22 Sep 202201:15	–	prion

Source	Link
osv	www.osv.dev/vulnerability/CVE-2022-28981
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-28981
osv	www.osv.dev/vulnerability/GHSA-5j86-vmpx-42pc
portal	www.portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28981-path-traversal-vulnerability-in-hypermedia-rest-apis
github	www.github.com/liferay/liferay-portal
liferay	www.liferay.com/
web	www.web.archive.org/web/20220929232244/https:/portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-28981-path-traversal-vulnerability-in-hypermedia-rest-apis
t	www.t.me/cibsecurity/50249
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2022-28981-path-traversal-vulnerability-in-hypermedia-rest-apis

23 Sep 2022 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.5

EPSS0.00262

SSVC