CVE-2022-42119: XSS

Q: What is the severity of CVE-2022-42119?

The severity of CVE-2022-42119 is medium with a score of 5.4.

Q: Which Liferay products are affected by CVE-2022-42119?

CVE-2022-42119 affects Liferay Portal versions 7.3.5 through 7.4.2 and Liferay DXP version 7.3 before update 8.

Q: What is the vulnerability type of CVE-2022-42119?

CVE-2022-42119 is a Cross Site Scripting (XSS) vulnerability.

Q: How can I fix CVE-2022-42119?

To fix CVE-2022-42119, it is recommended to update your Liferay Portal or Liferay DXP to the latest version available.

Q: Where can I find more information about CVE-2022-42119?

You can find more information about CVE-2022-42119 on the official Liferay website, the Liferay issue tracker, and the Liferay developer portal.

Published Nov 15, 2022

Updated

Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.

Affected Software

9 affected components

Liferay Liferay Portal>=7.3.5<=7.4.2

Liferay DXP=7.3

Liferay DXP=7.3-update_1

Liferay DXP=7.3-update_2

Liferay DXP=7.3-update_3

Liferay DXP=7.3-update_4

Liferay DXP=7.3-update_5

Liferay DXP=7.3-update_6

Liferay DXP=7.3-update_7

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Liferay DXP to a version that resolves this vulnerability.
Fixed in 8

Event History

Nov 15, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-42119?

The severity of CVE-2022-42119 is medium with a score of 5.4.

Which Liferay products are affected by CVE-2022-42119?