CVE-2023-44308

Description

Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.

Risk Information

Base Score

6.1

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.191

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2023-44308 are fixed in Liferay - com.liferay.adaptive.media.web 3.6	Windows
Vulnerabilities CVE-2023-44308 are affected in Liferay - com.liferay.adaptive.media.web 7.4.13	Windows
Vulnerabilities CVE-2023-44308 are fixed in Liferay - com.liferay.adaptive.media.web for Linux 3.6	Linux
Vulnerabilities CVE-2023-44308 are affected in Liferay - com.liferay.adaptive.media.web for Linux 7.4.13	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234