CVE-2023-44311

creationtimestamp| type| source ---|---|--- 2023-10-17 14:32:53+00:00| seen| https://t.me/cibsecurity/72412...

CVE-2023-44311

CVE-2023-44311 describes multiple reflected XSS in the Plugin for OAuth 2.0’s OAuth2ProviderApplicationRedirect class for Liferay Portal 7.4.3.41–7.4.3.89 and Liferay DXP 7.4 update 41–89. The issue is caused by an incomplete fix of CVE-2023-33941, allowing remote attackers to inject arbitrary we...