Description

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

Remediation

References

CVE-2022-45320

Related Vulnerabilities

WordPress Plugin Disable Image Right Click Cross-Site Scripting (1.0)

Skipper : Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2026-54247)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2011-0708)

WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.4.1)

PostgreSQL Insufficient Verification of Data Authenticity Vulnerability (CVE-2024-10977)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CVE-2022-45320