Количество 2
Количество 2
CVE-2023-42497
Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter.
GHSA-w2g3-j73q-7qv7
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-42497 Reflected cross-site scripting (XSS) vulnerability on the Export for Translation page in Liferay Portal 7.4.3.4 through 7.4.3.85, and Liferay DXP 7.4 before update 86 allows remote attackers to inject arbitrary web script or HTML via the `_com_liferay_translation_web_internal_portlet_TranslationPortlet_redirect` parameter. | CVSS3: 9.6 | 0% Низкий | больше 2 лет назад |
| GHSA-w2g3-j73q-7qv7 Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page | CVSS3: 9.6 | 0% Низкий | больше 2 лет назад |
Уязвимостей на страницу