Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

LSV-961: SQL injection vulnerability during page template upgrade

Affects versions

Fix versions

7.0 Fix Pack Version

7.1 Fix Pack Version

7.2 Fix Pack Version

7.3 Fix Pack Version

7.4 Fix Pack Version

CVE IDs

CVSS Base Score

CVSS Vector String

Labels

Description

SQL injection vulnerability in the Layout module's page template upgrade process in Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated attackers to execute arbitrary SQL commands via a crafted payload injected into a page template's 'Name' field. To exploit this vulnerability, the attacker must create a page template with a malicious name in Liferay DXP 7.1 before fix pack 11, and wait for the application to be upgraded.

Activity

Show:

Enterprise Release HU July 13, 2022 at 3:14 PM

Moved to Closed - Liferay Branch Manager

Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Priority

Zendesk Support

Created November 10, 2021 at 6:33 AM
Updated October 18, 2022 at 8:12 PM
Resolved July 13, 2022 at 3:14 PM