Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Liferay Portal Inefficient Regular Expression Complexity Vulnerability - CVE-2023-33950 - Vulnerability Database
Liferay Portal

Liferay Portal Inefficient Regular Expression Complexity Vulnerability - CVE-2023-33950

High
Reference: CVE-2023-33950
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-33950
Title: Liferay Portal Inefficient Regular Expression Complexity Vulnerability
Overview:

Pattern Redirects in Liferay Portal 7.4.3.48 through 7.4.3.76 and Liferay DXP 7.4 update 48 through 76 allows regular expressions that are vulnerable to ReDoS attacks to be used as patterns which allows remote attackers to consume an excessive amount of server resources via crafted request URLs.