CVE-2022-28981

published 2022-09-22

CVE-2022-28981: Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
liferay	liferay_portal	7.4.0 – 7.4.2	—

CWE-22