Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-44308

Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.

Published

2024-02-20T07:15:08.033

Last Modified

2025-01-28T21:34:39.347

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-601
Type: Primary
CWE-601

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	7.4	Yes
Application	liferay	digital_experience_platform	2023.q3.0	Yes
Application	liferay	digital_experience_platform	2023.q3.1	Yes
Application	liferay	digital_experience_platform	2023.q3.2	Yes
Application	liferay	digital_experience_platform	2023.q3.3	Yes
Application	liferay	digital_experience_platform	2023.q3.4	Yes
Application	liferay	digital_experience_platform	2023.q3.5	Yes

References

https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44308 Vendor Advisory ([email protected])
https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44308 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)