Description

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

Remediation

References

CVE-2022-45320

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-11612)

Apache Traffic Server Improper Authentication Vulnerability (CVE-2021-38161)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4422)

WordPress Plugin SendGrid Security Bypass (1.11.8)

WordPress 5.2.x Multiple Vulnerabilities (5.2 - 5.2.16)

Severity

Medium

Classification

CVE-2022-45320 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities