Description

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

Remediation

References

CVE-2022-42131

Related Vulnerabilities

WordPress Plugin BulletProof Security Multiple Cross-Site Scripting Vulnerabilities (.48.9)

Squid Integer Overflow or Wraparound Vulnerability (CVE-2020-11945)

PostgreSQL Resource Management Errors Vulnerability (CVE-2012-2655)

Zikula Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-1724)

PHP Incorrect Conversion between Numeric Types Vulnerability (CVE-2016-3074)

Severity

Medium

Classification

CVE-2022-42131 CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities