Description

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

Remediation

References

CVE-2022-42131

Related Vulnerabilities

Chamilo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-27423)

WordPress Plugin User Registration-Custom Registration Form, Login Form And User Profile Cross-Site Scripting (2.3.0)

Grafana Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-12459)

WordPress Plugin Video Player for YouTube Cross-Site Scripting (1.3)

Apache HTTP Server NULL Pointer Dereference Vulnerability (CVE-2014-3581)

Severity

Medium

Classification

CVE-2022-42131 CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities