Lucene search
PRIOn knowledge basePRION:CVE-2022-42126HistoryNov 15, 2022 - 1:15 a.m.
Code injection
2022-11-1501:15:00
PRIOn knowledge base
www.prio-n.com
6
code injection
liferay portal
asset libraries
unauthorized access
The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.
Related
cvelist
cvelist
CVE-2022-42126
2022-11-15 00:00:00
osv
osv
BIT-liferay-2022-42126
2024-01-31 15:20:16
Missing permissions check in Liferay Portal
2022-11-15 12:00:16
CVE-2022-42126
2022-11-15 01:15:13
nvd
nvd
CVE-2022-42126
2022-11-15 01:15:13
cve
cve
CVE-2022-42126
2022-11-15 01:15:13
github
github
Missing permissions check in Liferay Portal
2022-11-15 12:00:16