Description

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

Remediation

References

CVE-2022-42131

Related Vulnerabilities

WebLogic CVE-2019-2615 Vulnerability (CVE-2019-2615)

WordPress Plugin EWWW Image Optimizer Cross-Site Scripting (2.0.1)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (5.7.14)

MySQL CVE-2011-2262 Vulnerability (CVE-2011-2262)

WordPress Plugin Waitlist Woocommerce (Back in stock notifier) Cross-Site Request Forgery (2.5.1)

Severity

Medium

Classification

CVE-2022-42131 CWE-295 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities