CVE-2022-42121

CVE-2022-42121 is a SQL injection vulnerability in the Liferay Portal Layout module affecting 7.1.3–7.4.3.4 and Liferay DXP 7.1 (before fix pack 27), 7.2 (before fix pack 17), 7.3 (before service pack 3), and 7.4 GA. The issue allows remote authenticated attackers to execute arbitrary SQL command...