Henrik Bayer

#14973من 60,596
21إجمالي CVSS
الثغرات · 3
متوسطة
2
عالية
1
PT-2023-23529
2023-06-15
6.1
CVE-2023-3193
Liferay
Liferay Portal
A cross-site scripting (XSS) issue exists in the Layout module's SEO configuration, allowing remote attackers to inject arbitrary web script or HTML via the ` com liferay layout admin web portlet GroupPagesPortlet backURL` parameter. This enables attackers to execute malicious scripts on the victim's browser.
PT-2023-25100
2023-06-15
6.1
CVE-2023-35029
Liferay
Liferay Portal
The issue is related to an open redirect vulnerability in the Layout module's SEO configuration. This vulnerability allows remote attackers to redirect users to arbitrary external URLs via the ` com liferay layout admin web portlet GroupPagesPortlet backURL` parameter.
PT-2023-25102
2023-06-15
8.8
CVE-2023-35030
Liferay
Liferay Portal
A cross-site request forgery (CSRF) issue in the Layout module's SEO configuration allows remote attackers to execute arbitrary code in the scripting console via the ` com liferay layout admin web portlet GroupPagesPortlet backURL` parameter.