CVE-2023-44308
published 2024-02-20CVE-2023-44308: Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers…
PriorityP424medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.39%
30.9th percentile
Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | digital_experience_platform | — | — |
| liferay | dxp | 2023.q3.1 – 2023.q3.5 | — |
| liferay | dxp | 7.4.13 – 7.4.13.u92 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
ghsa·2024-02-20
CVE-2023-44308 [MEDIUM] CWE-601 Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.
OSV
Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
osv·2024-02-20
CVE-2023-44308 [MEDIUM] Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page
Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-02-20
Published