Detections
Analytics
Liferay DXP 7.4.13.70 < x < 7.4.13.77 Multiple vulnerabilities
high Nessus Plugin ID 177740
Language:
Synopsis
An application running on a remote web server host is affected by multiple vulnerabilitiesDescription
The detected install of Liferay DXP is between 7.4.13.70 and 7.4.13.76. It is therefore affected by multiple vulnerabilities:- Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.13.70 through 7.4.13.76 allows remote attackers to execute arbitrary code in the scripting console via the _com_liferay_layout_admin_web_portlet_ GroupPagesPortlet_backURL parameter. (CVE-2023-35030)
- Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.13.70 through 7.4.13.76, to redirect users to arbitrary external URLs via the
_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter. CVE-2023-35029)
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Liferay Portal 7.4.13.77 or later.See Also
Plugin Details
Severity: High
ID: 177740
File Name: liferay_DXP_7_4_3_77.nasl
Version: 1.3
Type: local
Family: CGI abuses
Published: 6/29/2023
Updated: 10/23/2024
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2023-35030
CVSS v3
Risk Factor: High
Base Score: 8.8
Temporal Score: 7.7
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:liferay:liferay_portal
Required KB Items: installed_sw/Liferay DXP
Exploit Ease: No known exploits are available
Patch Publication Date: 5/19/2023
Vulnerability Publication Date: 6/15/2023
Reference Information
CVE: CVE-2023-35029, CVE-2023-35030
IAVA: 2023-A-0312-S