deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-43968
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Reflected XSS in the dashboard icons due to un-sanitized output. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-33907
Published: 2022-11-14
Description: DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack... DMA transactions which are targeted at input buffers used for the software SMI handler used by the IdeBusDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25 https://www.insyde.com/security-pledge/SA-2022049
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022049
CVE: CVE-2022-33982
Published: 2022-11-14
Description: DMA attacks on the parameter buffer used by the Int15ServiceSmm software SMI handler could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. DMA attacks on the parameter buffer used by the software SMI handler used by the driver Int15ServiceSmm could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.2: 05.27.23, Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23 CWE-367
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022052
CVE: CVE-2022-34325
Published: 2022-11-14
Description: DMA transactions which are targeted at input buffers used for the StorageSecurityCommandDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the StorageSecurityCommandDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by
CVSS Score: 7.8 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022057; https://www.insyde.com/security-pledge
CVE: CVE-2022-40735
Published: 2022-11-14
Description: The Diffie-Hellman Key Agreement Protocol allows use of long exponents that arguably make certain calculations unnecessarily expensive, because the 1996 van Oorschot and Wiener paper found that "(appropriately) short exponents" can be used when there are adequate subgroup constraints, and these short exponents can lead to less expensive calculations than for long exponents. This issue is different from CVE-2002-20001 because it is based on an observation about exponent size, rather than an observation about numbers that are not public keys. The specific situations in which calculation expense would constitute a server-side vulnerability depend on the protocol (e.g., TLS, SSH, or IKE) and the DHE implementation details. In general, there might be an availability concern because of server-side resource consumption from DHE modular-exponentiation calculations. Finally, it is possible for an attacker to exploit this vulnerability and CVE-2002-20001 together.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://dheatattack.gitlab.io/; https://gist.github.com/c0r0n3r/9455ddcab985c50fd1912eabf26e058b; https://github.com/mozilla/ssl-config-generator/issues/162
CVE: CVE-2022-40903
Published: 2022-11-14
Description: Aiphone GT-DMB-N 3-in-1 Video Entrance Station with NFC Reader 1.0.3 does not mitigate against repeated failed access attempts, which allows an attacker to gain administrative privileges.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-307
References: https://jvn.jp/en/jp/JVN75437943/index.html; https://www.aiphone.net/; https://jvn.jp/en/jp/JVN75437943/index.html
CVE: CVE-2022-43030
Published: 2022-11-14
Description: Siyucms v6.1.7 was discovered to contain a remote code execution (RCE) vulnerability in the background. SIYUCMS is a content management system based on ThinkPaP5 AdminLTE. SIYUCMS has a background command execution vulnerability, which can be used by attackers to gain server privileges
CVSS Score: 7.2 (HIGH)
CWE: CWE-521, CWE-521
References: https://github.com/cai-niao98/siyu; https://github.com/cai-niao98/siyu/blob/main/README.md; https://github.com/cai-niao98/siyu
CVE: CVE-2022-43687
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 does not issue a new session ID upon successful OAuth authentication. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-384, CWE-384
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43688
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in icons since the Microsoft application tile color is not sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43689
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to XXE based DNS requests leading to IP disclosure.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-611, CWE-611
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43690
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 did not use strict comparison for the legacy_salt so that limited authentication bypass could occur if using this functionality. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-287
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43691
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 inadvertently disclose server-side sensitive information (secrets in environment variables and server information) when Debug Mode is left on in production.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-43695
Published: 2022-11-14
Description: Concrete CMS (formerly concrete5) below 8.5.10 and between 9.0.0 and 9.1.2 is vulnerable to Stored Cross-Site Scripting (XSS) in dashboard/system/express/entities/associations because Concrete CMS allows association with an entity name that doesn’t exist or, if it does exist, contains XSS since it was not properly sanitized. Remediate by updating to Concrete CMS 9.1.3+ or 8.5.10+.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://documentation.concretecms.org/developers/introduction/version-history/8510-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/913-release-notes; https://github.com/concretecms/concretecms/releases/8.5.10
CVE: CVE-2022-30774
Published: 2022-11-15
Description: DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) DMA attacks on the parameter buffer used by the PnpSmm driver could change the contents after parameter values have been checked but before they are used (a TOCTOU attack) . This issue was discovered by Insyde engineering during a security review. This iss was fixed in Kernel 5.2: 05.27.29, Kernel 5.3: 05.36.25, Kernel 5.4: 05.44.25, Kernel 5.5: 05.52.25. CWE-367 https://www.insyde.com/security-pledge/SA-2022043
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022043
CVE: CVE-2022-31243
Published: 2022-11-15
Description: Update description and links DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corruption through a TOCTOU attack.. "DMA transactions which are targeted at input buffers used for the software SMI handler used by the FvbServicesRuntimeDxe driver could cause SMRAM corruption. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in Kernel 5.2: 05.27.21. Kernel 5.3: 05.36.21. Kernel 5.4: 05.44.21. Kernel 5.5: 05.52.21 https://www.insyde.com/security-pledge/SA-2022044
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022044
CVE: CVE-2022-32267
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the SmmResourceCheckDxe software SMI handler cause SMRAM corruption (a TOCTOU attack) DMA transactions which are targeted at input buffers used for the software SMI handler used by the SmmResourceCheckDxe driver could cause SMRAM corruption through a TOCTOU attack... This issue was discovered by Insyde engineering. Fixed in kernel Kernel 5.2: 05.27.23. Kernel 5.3: 05.36.23. Kernel 5.4: 05.44.23. Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022046
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022046; https://www.insyde.com/security-pledge
CVE: CVE-2022-33905
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the AhciBusDxe software SMI handler could cause SMRAM corruption (a TOCTOU attack). DMA transactions which are targeted at input buffers used for the software SMI handler used by the AhciBusDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group, Fixed in kernel 5.2: 05.27.23, kernel 5.3: 05.36.23, kernel 5.4: 05.44.23, kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022047
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022047; https://www.insyde.com/security-pledge
CVE: CVE-2022-33906
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the FwBlockServiceSmm software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the FwBlockServiceSmm driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.23, 5.3: 05.36.23, 5.4: 05.44.23, 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022048
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022048
CVE: CVE-2022-33908
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the SdHostDriver software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdHostDriver driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022050
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022050; https://www.insyde.com/security-pledge
CVE: CVE-2022-33909
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the HddPassword software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the HddPassword driver could cause SMRAM corruption through a TOCTOU attack..This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. Fixed in kernel Kernel 5.2: 05.27.23, Kernel 5.3: 05.36.23, Kernel 5.4: 05.44.23, Kernel 5.5: 05.52.23 https://www.insyde.com/security-pledge/SA-2022051
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022051; https://www.insyde.com/security-pledge
CVE: CVE-2022-33983
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the NvmExpressLegacy software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressLegacy driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. This issue was fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022053
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022053; https://www.insyde.com/security-pledge
CVE: CVE-2022-33984
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the SdMmcDevice software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the SdMmcDevice driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. This was fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022054
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://cert-portal.siemens.com/productcert/pdf/ssa-450613.pdf; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022054
CVE: CVE-2022-33985
Published: 2022-11-15
Description: DMA transactions which are targeted at input buffers used for the NvmExpressDxe software SMI handler could cause SMRAM corruption through a TOCTOU attack. DMA transactions which are targeted at input buffers used for the software SMI handler used by the NvmExpressDxe driver could cause SMRAM corruption through a TOCTOU attack. This issue was discovered by Insyde engineering based on the general description provided by Intel's iSTARE group. This issue was fixed in kernel 5.2: 05.27.25, kernel 5.3: 05.36.25, kernel 5.4: 05.44.25, kernel 5.5: 05.52.25 https://www.insyde.com/security-pledge/SA-2022055
CVSS Score: 7.0 (HIGH)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022055; https://www.insyde.com/security-pledge
CVE: CVE-2022-33986
Published: 2022-11-15
Description: DMA attacks on the parameter buffer used by the VariableRuntimeDxe software SMI handler could lead to a TOCTOU attack. DMA attacks on the parameter buffer used by the software SMI handler used by the driver VariableRuntimeDxe could lead to a TOCTOU attack on the SMI handler and lead to corruption of SMRAM. This issue was discovered by Insyde engineering during a security review. This issue is fixed in Kernel 5.4: 05.44.23 and Kernel 5.5: 05.52.23. CWE-367 CWE-367 Report at: https://www.insyde.com/security-pledge/SA-2022056
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-367, CWE-367
References: https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022056; https://www.insyde.com/security-pledge
CVE: CVE-2022-35613
Published: 2022-11-15
Description: Konker v2.3.9 was to discovered to contain a Cross-Site Request Forgery (CSRF).
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: https://securityblog101.blogspot.com/2022/10/cve-id-cve-2022-35613.html; https://securityblog101.blogspot.com/2022/10/cve-id-cve-2022-35613.html
CVE: CVE-2022-40405
Published: 2022-11-15
Description: WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/nhiephon/Research; https://github.com/nhiephon/Research
CVE: CVE-2022-42110
Published: 2022-11-15
Description: A Cross-site scripting (XSS) vulnerability in the Announcements module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://issues.liferay.com/browse/LPE-17403; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42110; https://issues.liferay.com/browse/LPE-17403
CVE: CVE-2022-42984
Published: 2022-11-15
Description: WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: https://github.com/nhiephon/Research; https://www.wowonder.com/; https://github.com/nhiephon/Research
CVE: CVE-2022-42111
Published: 2022-11-15
Description: A Cross-site scripting (XSS) vulnerability in the Sharing module's user notification in Liferay Portal 7.2.1 through 7.4.2, and Liferay DXP 7.2 before fix pack 19, and 7.3 before update 4 allows remote attackers to inject arbitrary web script or HTML by sharing an asset with a crafted payload.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://issues.liferay.com/browse/LPE-17379; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42111; https://issues.liferay.com/browse/LPE-17379
CVE: CVE-2022-42118
Published: 2022-11-15
Description: A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the `tag` parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17342; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42118
CVE: CVE-2022-42119
Published: 2022-11-15
Description: Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17632; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42119
CVE: CVE-2022-42120
Published: 2022-11-15
Description: A SQL injection vulnerability in the Fragment module in Liferay Portal 7.3.3 through 7.4.3.16, and Liferay DXP 7.3 before update 4, and 7.4 before update 17 allows attackers to execute arbitrary SQL commands via a PortletPreferences' `namespace` attribute.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17513; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42120
CVE: CVE-2022-42121
Published: 2022-11-15
Description: A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated attackers to execute arbitrary SQL commands via a crafted payload injected into a page template's 'Name' field.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17414; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42121
CVE: CVE-2022-42122
Published: 2022-11-15
Description: A SQL injection vulnerability in the Friendly Url module in Liferay Portal 7.3.7, and Liferay DXP 7.3 fix pack 2 through update 4 allows attackers to execute arbitrary SQL commands via a crafted payload injected into the `title` field of a friendly URL.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17520; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42122
CVE: CVE-2022-42123
Published: 2022-11-15
Description: A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17518; https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/cve-2022-42123
CVE: CVE-2022-42124
Published: 2022-11-15
Description: ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2 fix pack 9 through fix pack 18, 7.3 before update 4, and DXP 7.4 GA allows remote attackers to consume an excessive amount of server resources via a crafted payload injected into the 'name' field of a layout prototype.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333, CWE-1333
References: http://liferay.com; https://issues.liferay.com/browse/LPE-17435; https://issues.liferay.com/browse/LPE-17535