CVE-2022-28977

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-28977
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28977.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-28977
Aliases
Published
2022-09-22T00:02:08Z
Modified
2026-07-15T01:48:54.482610280Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 fix pack 91 through 101, 7.1 fix pack 17 through 25, 7.2 fix pack 5 through 14, and 7.3 before service pack 3 can be circumvented by using multiple forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirectparameter (2)FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/28xxx/CVE-2022-28977.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "introduced": "7.3.1"
                },
                {
                    "fixed": "7.4.2"
                },
                {
                    "introduced": "91"
                },
                {
                    "fixed": "101"
                },
                {
                    "introduced": "17"
                },
                {
                    "fixed": "25"
                },
                {
                    "introduced": "5"
                },
                {
                    "fixed": "14"
                },
                {
                    "introduced": "7.3"
                }
            ],
            "source": "DESCRIPTION"
        }
    ]
}
References

Affected packages

Git / github.com/liferay/liferay-portal

Affected ranges

Type
GIT
Repo
https://github.com/liferay/liferay-portal
Events
Introduced
4ffdd7225ef4a5fd922703263a3006a741a4d8d0
Fixed
75354f3482d7c5edb70f4cd72ed8664ce8079842
Database specific 
{
    "extracted_events": [
        {
            "introduced": "7.3.1"
        },
        {
            "fixed": "7.4.2"
        }
    ],
    "source": "DESCRIPTION"
}

Affected versions

7.*
7.3.1-ga2
7.3.2-ga3
7.3.3-ga4
7.3.4-ga5
7.3.5-ga6
7.4.0-ga1
7.4.1-ga2
Other
test-fix-pack-base-7310

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-28977.json"