Description

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

Remediation

References

CVE-2022-45320

Related Vulnerabilities

WordPress Plugin Service Finder-Provider and Business Listing Local File Disclosure (3.0)

Dot CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2016-4040)

Apache HTTP Server Improper Input Validation Vulnerability (CVE-2011-3368)

WordPress Plugin 4k Icons for Visual Composer-Free Cross-Site Scripting (1.0)

Internet Information Services Configuration Vulnerability (CVE-2003-1566)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Tags

Missing Update Known Vulnerabilities CVE-2022-45320