CVE-2022-26597: XSS
First published: Mon Apr 25 2022(Updated: )
Cross-site scripting (XSS) vulnerability in the Layout module's Open Graph integration in Liferay Portal 7.3.0 through 7.4.0, and Liferay DXP 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the site name.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Liferay Digital Experience Platform | <7.3 | |
| Liferay Digital Experience Platform | =7.3 | |
| Liferay Digital Experience Platform | =7.3-fix_pack_1 | |
| Liferay Digital Experience Platform | =7.3-fix_pack_2 | |
| Liferay Liferay Portal | >=7.3.0<=7.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2022-26597.
What is the severity level of CVE-2022-26597?
The severity level of CVE-2022-26597 is medium.
How does CVE-2022-26597 affect Liferay Portal and Liferay DXP?
CVE-2022-26597 affects Liferay Portal 7.3.0 through 7.4.0 and Liferay DXP 7.3 before service pack 3.
What can an attacker do with CVE-2022-26597?
With CVE-2022-26597, remote attackers can inject arbitrary web script or HTML via the site name.
Is there a fix available for CVE-2022-26597?
Yes, a fix is available for CVE-2022-26597. Please refer to the official website of Liferay for more information.
- collector/nvd-index
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/liferay
- canonical/liferay digital experience platform
- version/liferay digital experience platform/7.3
- version/liferay digital experience platform/7.3-fix_pack_1
- version/liferay digital experience platform/7.3-fix_pack_2
- canonical/liferay liferay portal
- version/liferay liferay portal/7.3.0
- version/liferay liferay portal/7.4.0