CVE-2022-39975

creationtimestamp| type| source ---|---|--- 2022-09-22 07:11:52+00:00| seen| https://t.me/cibsecurity/50257 2024-01-28 07:09:09+00:00| seen| https://t.me/arpsyndicate/3244...

CVE-2022-39975

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a "Content Page" type page, allowing attackers to view unpublished "Content Page" pages via URL manipulation...

CVE-2022-39975

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a "Content Page" type page, allowing attackers to view unpublished "Content Page" pages via URL manipulation...

CVE-2022-39975

The CVE-2022-39975 issue affects Liferay Portal 7.3.3–7.4.3.34 and Liferay DXP 7.3 (pre-update 10) and 7.4 (pre-update 35). The root cause is missing authorization when previewing a Content Page, enabling an attacker to view unpublished Content Pages via URL manipulation. Exploitation details are...