Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Liferay DXP Session Fixation Vulnerability - CVE-2023-47798 - Vulnerability Database
Liferay DXP

Liferay DXP Session Fixation Vulnerability - CVE-2023-47798

Medium
Reference: CVE-2023-47798
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2023-47798
Title: Liferay DXP Session Fixation Vulnerability
Overview:

Account lockout in Liferay Portal 7.2.0 through 7.3.0 and older unsupported versions and Liferay DXP 7.2 before fix pack 5 and older unsupported versions does not invalidate existing user sessions which allows remote authenticated users to remain authenticated after an account has been locked.