CVE-2022-28981: Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of…

PriorityP344high7.5CVSS 3.1

AVNACLPRNUINSUCHINAN

EPSS

1.07%

61.3th percentile

Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
liferay	liferay_portal	7.4.0 – 7.4.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.