5 matches found
CVE-2022-26593
Cross-site scripting XSS vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category...
com.liferay:com.liferay.asset.categories.navigation.web (>=1.0.0, <=2.0.6), com.liferay:com.liferay.asset.taglib.freemarker.contributor (2.0.0) potentially affected by CVE-2022-26593 via com.liferay:com.liferay.asset.taglib (2.0.0)
com.liferay:com.liferay.asset.taglib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.asset.taglib and may be impacted: - com.liferay:com.liferay.asset.categories.navigation.web =1.0.0, =2.0.6 -...
CVE-2022-26593
CVE-2022-26593 is an XSS vulnerability affecting Liferay Portal/DXP: Asset module’s asset categories selector in Liferay Portal 7.3.3–7.4.0 and Liferay DXP 7.3 before SP3. The issue allows remote attackers to inject arbitrary web script/HTML via the name of an asset category. Root cause is a cros...
com.liferay:com.liferay.asset.categories.navigation.web (>=1.0.0, <=2.0.6), com.liferay:com.liferay.asset.taglib.freemarker.contributor (2.0.0) potentially affected by CVE-2022-26593 via com.liferay:com.liferay.asset.taglib (2.0.0)
com.liferay:com.liferay.asset.taglib MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.liferay:com.liferay.asset.taglib and may be impacted: - com.liferay:com.liferay.asset.categories.navigation.web =1.0.0, =2.0.6 -...
CVE-2022-26593
Cross-site scripting XSS vulnerability in the Asset module's asset categories selector in Liferay Portal 7.3.3 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the name of a asset category...