CVE-2023-33940

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-33940
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-33940.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-33940
Aliases
Published
2023-05-24T14:15:09Z
Modified
2024-09-03T05:48:04.387622Z
Severity
  • 5.4 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
[none]
Details

Cross-site scripting (XSS) vulnerability in IFrame type Remote Apps in Liferay Portal 7.4.0 through 7.4.3.30, and Liferay DXP 7.4 before update 31 allows remote attackers to inject arbitrary web script or HTML via the Remote App's IFrame URL.

References

Affected packages

Git / github.com/liferay/liferay-portal

Affected ranges

Type
GIT
Repo
https://github.com/liferay/liferay-portal
Events

Affected versions

7.*

7.4.0-ga1
7.4.1-ga2