Liferay Portal Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-42125 - Vulnerability Database

Liferay Portal Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability - CVE-2022-42125

High

Reference: CVE-2022-42125

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-42125

Title: Liferay Portal Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) Vulnerability

Overview:

Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through update 34 allows attackers to create or overwrite existing files on the filesystem via the deployment of a malicious plugin/module.