CVE-2024-25609: Medium severity Liferay Digital Experience Platform vulnerability
HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect parameter (2) FORWARDURL parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/com.liferay.portal:release.dxp.bomto a version that resolves this vulnerability.Fixed in 7.4.13.u9 - Upgrade
Upgrade
maven/com.liferay.portal:release.portal.bomto a version that resolves this vulnerability.Fixed in 7.4.3.13-ga13
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25609?
CVE-2024-25609 is considered a high severity vulnerability due to its potential to allow remote attackers to exploit the system.
What versions are affected by CVE-2024-25609?
CVE-2024-25609 affects Liferay Portal versions 7.2.0 through 7.4.3.12 and older unsupported versions as well as Liferay DXP 7.4 before update 9, 7.3 service pack 3, and specific fix packs.
How do I fix CVE-2024-25609?
To fix CVE-2024-25609, users should upgrade to the latest patched versions of Liferay Portal or Liferay DXP that address this vulnerability.
What type of vulnerability is CVE-2024-25609?
CVE-2024-25609 is a security vulnerability related to improper validation in the HtmlUtil.escapeRedirect function.
Can CVE-2024-25609 be exploited remotely?
Yes, CVE-2024-25609 can be exploited remotely by attackers using specific tactics to bypass security measures.