Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-39975

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a "Content Page" type page, allowing attackers to view unpublished "Content Page" pages via URL manipulation.

Published

2022-09-22T00:15:10.310

Last Modified

2025-05-27T19:15:22.957

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-862
  • Type: Secondary
    CWE-862
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.3 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay dxp 7.4 Yes
Application liferay liferay_portal < 7.4.3.35 Yes
References