deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-chj2-4vg7-hhg3
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: CRITICAL (CVSS 9.6)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 7.0.0-GA, <= 7.0.10.fp102
Patched in: unpatched

Summary: Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console

Details:
The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently protect against Cross-Site Request Forgery (CSRF) attacks, which allows remote attackers to execute arbitrary Groovy script via a crafted URL or a XSS vulnerability. This issue has been patched in Liferay Portal 7.4.3.102, Liferay DXP 2024.Q1.1, Liferay DXP 2023.Q4.0, Liferay DXP 2023.Q3.5, and Liferay DXP 7.3 Update 36.
GitHub Security Advisory: GHSA-chj2-4vg7-hhg3
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: CRITICAL (CVSS 9.6)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2023.Q3.1, < 2023.Q3.5
Patched in: 2023.Q3.5

Summary: Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console

Details:
The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently protect against Cross-Site Request Forgery (CSRF) attacks, which allows remote attackers to execute arbitrary Groovy script via a crafted URL or a XSS vulnerability. This issue has been patched in Liferay Portal 7.4.3.102, Liferay DXP 2024.Q1.1, Liferay DXP 2023.Q4.0, Liferay DXP 2023.Q3.5, and Liferay DXP 7.3 Update 36.
GitHub Security Advisory: GHSA-chj2-4vg7-hhg3
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: CRITICAL (CVSS 9.6)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 7.0.0-a1, < 7.4.3.102-GA102
Patched in: 7.4.3.102-GA102

Summary: Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console

Details:
The Script Console in Liferay Portal 7.0.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, 7.2 GA through fix pack 20, 7.1 GA through fix pack 28, 7.0 GA through fix pack 102 and 6.2 GA through fix pack 173 does not sufficiently protect against Cross-Site Request Forgery (CSRF) attacks, which allows remote attackers to execute arbitrary Groovy script via a crafted URL or a XSS vulnerability. This issue has been patched in Liferay Portal 7.4.3.102, Liferay DXP 2024.Q1.1, Liferay DXP 2023.Q4.0, Liferay DXP 2023.Q3.5, and Liferay DXP 7.3 Update 36.
GitHub Security Advisory: GHSA-mh9r-9pcx-rx55
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: HIGH (CVSS 8.8)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 7.2.0, < 7.2.10.fp11
Patched in: 7.2.10.fp11

Summary: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

Details:
Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in the implementation for the portal services package before 5.25.0 from Liferay Portal (before 7.3.6), and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.
GitHub Security Advisory: GHSA-mh9r-9pcx-rx55
Package: com.liferay.portal:com.liferay.portal.impl (MAVEN)
Severity: HIGH (CVSS 8.8)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: < 5.25.0
Patched in: 5.25.0

Summary: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

Details:
Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in the implementation for the portal services package before 5.25.0 from Liferay Portal (before 7.3.6), and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: >= 7.3.0, < 7.3.10.fp1
Patched in: 7.3.10.fp1

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: < 7.2.10.fp17
Patched in: 7.2.10.fp17

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay.commerce:com.liferay.commerce.account.web (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: < 3.0.7
Patched in: 3.0.7

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay:com.liferay.login.web (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: < 5.0.18
Patched in: 5.0.18

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay:com.liferay.users.admin.web (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: < 5.0.33
Patched in: 5.0.33

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-mwhf-6mjm-6w3h
Package: com.liferay.portal:portal-impl (MAVEN)
Severity: MODERATE (CVSS 6.3)
CWE: CWE-640: Weak Password Recovery Mechanism for Forgotten Password
Vulnerable versions: < 5.18.4
Patched in: 5.18.4

Summary: Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers

Details:
In Liferay Impl before 5.18.4, Liferay Users Admin Web before 5.0.33, Liferay Login Web before 5.0.18, and Liferay Commerce Account Web before 3.0.7 from Liferay Portal (7.2.0 through 7.3.5), and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.
GitHub Security Advisory: GHSA-qm43-g2xj-hvg5
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 7.4.0, < 7.4.13.u27
Patched in: 7.4.13.u27

Summary: Liferay Portal and Liferay DXP User Enumeration Vulnerability

Details:
User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.
GitHub Security Advisory: GHSA-qm43-g2xj-hvg5
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 7.3.0, < 7.3.10.u8
Patched in: 7.3.10.u8

Summary: Liferay Portal and Liferay DXP User Enumeration Vulnerability

Details:
User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.
GitHub Security Advisory: GHSA-qm43-g2xj-hvg5
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: < 7.2.10.fp20
Patched in: 7.2.10.fp20

Summary: Liferay Portal and Liferay DXP User Enumeration Vulnerability

Details:
User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.
GitHub Security Advisory: GHSA-qm43-g2xj-hvg5
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-203: Observable Discrepancy
Vulnerable versions: >= 7.2.0, < 7.4.3.27-ga27
Patched in: 7.4.3.27-ga27

Summary: Liferay Portal and Liferay DXP User Enumeration Vulnerability

Details:
User enumeration vulnerability in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 8, 7.2 before fix pack 20, and older unsupported versions allows remote attackers to determine if an account exist in the application by comparing the request's response time.
GitHub Security Advisory: GHSA-2mvj-q2q3-wxjv
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 7.4.0, < 7.4.13.u26
Patched in: 7.4.13.u26

Summary: Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

Details:
In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.
GitHub Security Advisory: GHSA-2mvj-q2q3-wxjv
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 7.3.0, < 7.3.10.u5
Patched in: 7.3.10.u5

Summary: Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

Details:
In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.
GitHub Security Advisory: GHSA-2mvj-q2q3-wxjv
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: < 7.2.10.fp19
Patched in: 7.2.10.fp19

Summary: Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

Details:
In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.
GitHub Security Advisory: GHSA-2mvj-q2q3-wxjv
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: >= 7.2.0, < 7.4.3.26-ga26
Patched in: 7.4.3.26-ga26

Summary: Liferay Portal and Liferay DXP HTTP Header Can Expose Versions

Details:
In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property `http.header.version.verbosity` is set to `full`, which allows remote attackers to easily identify the version of the application that is running and the vulnerabilities that affect that version via 'Liferay-Portal` response header.
GitHub Security Advisory: GHSA-3qq5-wcrx-4h8r
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.4.0, < 7.4.13.u9
Patched in: 7.4.13.u9

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.
GitHub Security Advisory: GHSA-3qq5-wcrx-4h8r
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.2.10.fp15, <= 7.2.10.fp18
Patched in: unpatched

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.
GitHub Security Advisory: GHSA-3qq5-wcrx-4h8r
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.2.0, < 7.4.3.13-ga13
Patched in: 7.4.3.13-ga13

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.
GitHub Security Advisory: GHSA-548x-j6x6-hcv4
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.4.0, < 7.4.13.u19
Patched in: 7.4.13.u19

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.
GitHub Security Advisory: GHSA-548x-j6x6-hcv4
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.3.0, < 7.3.10.u4
Patched in: 7.3.10.u4

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.
GitHub Security Advisory: GHSA-548x-j6x6-hcv4
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: < 7.2.10.fp19
Patched in: 7.2.10.fp19

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.
GitHub Security Advisory: GHSA-548x-j6x6-hcv4
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 6.1)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 7.2.0, < 7.4.3.19-ga19
Patched in: 7.4.3.19-ga19

Summary: Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

Details:
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the 'REPLACEMENT CHARACTER' (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.
GitHub Security Advisory: GHSA-mf8h-grfg-j9j3
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-276: Incorrect Default Permissions
Vulnerable versions: < 7.2.10.fp17
Patched in: 7.2.10.fp17

Summary: Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API

Details:
The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates by default, which allows remote attackers to view any template via the UI or API.
GitHub Security Advisory: GHSA-mf8h-grfg-j9j3
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-276: Incorrect Default Permissions
Vulnerable versions: >= 7.2.0, < 7.4.3.5-ga5
Patched in: 7.4.3.5-ga5

Summary: Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API

Details:
The Journal module in Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions grants guest users view permission to web content templates by default, which allows remote attackers to view any template via the UI or API.
GitHub Security Advisory: GHSA-pw7p-3648-qqmg
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: < 7.2.10.fp17
Patched in: 7.2.10.fp17

Summary: Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions

Details:
Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit their own permission via the User and Organizations section of the Control Panel.
GitHub Security Advisory: GHSA-pw7p-3648-qqmg
Package: com.liferay.portal:release.dxp.bom (MAVEN)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-863: Incorrect Authorization
Vulnerable versions: = 7.4.13
Patched in: unpatched

Summary: Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions

Details:
Liferay Portal 7.2.0 through 7.4.3.4, and older unsupported versions, and Liferay DXP 7.4.13, 7.3 before service pack 3, 7.2 before fix pack 17, and older unsupported versions does not properly check user permissions, which allows remote authenticated users with the VIEW user permission to edit their own permission via the User and Organizations section of the Control Panel.