Beveiligingsadvies

CVE-2022-42110

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-11-14 00:00:00
Laatst bijgewerkt 2025-04-30 18:52:45
Toegewezen door mitre
CVSS-score 6.1
Status PUBLISHED

Beschrijving

A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.