Description

Cross-site scripting (XSS) vulnerability in the Redirect module's redirection administration page in Liferay Portal 7.3.2 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_redirect_web_internal_portlet_RedirectPortlet_destinationURL parameter.

Remediation

References

CVE-2021-29045

Related Vulnerabilities

Internet Information Services Other Vulnerability (CVE-2002-1180)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction SQL Injection (3.7.1.5)

WordPress 5.0.x Multiple Vulnerabilities (5.0 - 5.0.7)

Oracle JRE CVE-2013-1540 Vulnerability (CVE-2013-1540)

IBM WebSEAL CVE-2018-1813 Vulnerability (CVE-2018-1813)

Severity

Medium

Classification

CVE-2021-29045 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities