Количество 2
Количество 2
CVE-2022-42120
A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute.
GHSA-r5fj-j449-vqw2
Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-42120 A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute. | CVSS3: 9.8 | 1% Низкий | около 3 лет назад |
| GHSA-r5fj-j449-vqw2 Liferay Portal and Liferay DXP Vulnerable to SQL Injection via the Fragment Module | CVSS3: 9.8 | 1% Низкий | около 3 лет назад |
Уязвимостей на страницу