Liferay DXP Missing Authorization Vulnerability - CVE-2022-39975 - Vulnerability Database

Liferay DXP Missing Authorization Vulnerability - CVE-2022-39975

Medium

Reference: CVE-2022-39975

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-39975

Title: Liferay DXP Missing Authorization Vulnerability

Overview:

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34 and Liferay DXP 7.3 before update 10 and 7.4 before update 35 does not check user permission before showing the preview of a quotContent Pagequot type page allowing attackers to view unpublished quotContent Pagequot pages via URL manipulation.