CVE-2020-7934: XSS
In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1.
Other sources
In LifeRay Portal CE 7.1.0 through 7.2.1, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results).
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/com.liferay.portal:release.portal.bomto a version that resolves this vulnerability.Fixed in 7.3.0 - Upgrade
Upgrade
liferay portal ceto a version that resolves this vulnerability.Fixed in 7.3.0 GA1
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7934?
CVE-2020-7934 has a high severity rating due to its exploitation potential for persistent cross-site scripting (XSS) attacks.
How do I fix CVE-2020-7934?
To fix CVE-2020-7934, update your Liferay Portal to the latest version that addresses this vulnerability.
What products are affected by CVE-2020-7934?
CVE-2020-7934 affects Liferay Portal Community Edition versions 7.1.0 through 7.2.1 GA2.
Can users exploit CVE-2020-7934 without authentication?
Yes, CVE-2020-7934 can be exploited by authenticated users who can modify the First Name, Middle Name, and Last Name fields.
What are the consequences of an attack exploiting CVE-2020-7934?
Exploiting CVE-2020-7934 could lead to unauthorized script execution in the context of other users' sessions, which may result in data theft or manipulation.