CVE-2020-7934: XSS
First published: Tue Jan 28 2020(Updated: )
In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Liferay 7.4 GA | >=7.1.0<=7.2.1 | |
| maven/com.liferay.portal:release.portal.bom | >=7.1.0<=7.2.1 | 7.3.0 |
| >=7.1.0<=7.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://semanticbits.com/liferay-portal-authenticated-xss-disclosure/
- https://github.com/3ndG4me/liferay-xss-7.2.1GA2-poc-report-CVE-2020-7934
- http://packetstormsecurity.com/files/160168/LifeRay-7.2.1-GA2-Cross-Site-Scripting.html
- https://nvd.nist.gov/vuln/detail/CVE-2020-7934
- https://web.archive.org/web/20200808034429/https://semanticbits.com/liferay-portal-authenticated-xss-disclosure
- https://github.com/advisories/GHSA-f99h-h678-fgg4 (Advisory)
Frequently Asked Questions
What is the severity of CVE-2020-7934?
CVE-2020-7934 has a high severity rating due to its exploitation potential for persistent cross-site scripting (XSS) attacks.
How do I fix CVE-2020-7934?
To fix CVE-2020-7934, update your Liferay Portal to the latest version that addresses this vulnerability.
What products are affected by CVE-2020-7934?
CVE-2020-7934 affects Liferay Portal Community Edition versions 7.1.0 through 7.2.1 GA2.
Can users exploit CVE-2020-7934 without authentication?
Yes, CVE-2020-7934 can be exploited by authenticated users who can modify the First Name, Middle Name, and Last Name fields.
What are the consequences of an attack exploiting CVE-2020-7934?
Exploiting CVE-2020-7934 could lead to unauthorized script execution in the context of other users' sessions, which may result in data theft or manipulation.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-f99h-h678-fgg4
- alias/CVE-2020-7934
- agent/software-canonical-lookup
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-cve
- source/NVD
- agent/event
- collector/github-advisory
- vendor/liferay
- canonical/liferay 7.4 ga
- version/liferay 7.4 ga/7.1.0
- version/liferay 7.4 ga/7.2.1
- package-manager/maven