Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

LSV-1116: Friendly URL history accessible to unauthorized users

Affects versions

None

Fix versions

None

7.0 Fix Pack Version

None

7.1 Fix Pack Version

None

7.2 Fix Pack Version

None

7.3 Fix Pack Version

None

7.4 Fix Pack Version

37

CVE IDs

CVSS Base Score

CVSS Vector String

Labels

Description

The Friendly Url module in Liferay DXP 7.4 update 1 though 36 does not properly check user permission, which allows remote attackers to obtain the history of all friendly URLs that was assigned to a page.

Activity

Show:
Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Priority

Zendesk Support

Created July 25, 2022 at 2:54 AM
Updated October 18, 2022 at 11:41 PM
Resolved October 18, 2022 at 11:41 PM