Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through
    7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary
    external URLs via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.
    (CVE-2023-35029)

The detected install of Liferay DXP is between 7.4.13.70 and 7.4.13.76. It is therefore affected by multiple vulnerabilities:

  - Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration   in Liferay Portal 7.4.13.70 through 7.4.13.76 allows remote attackers to execute arbitrary   code in the scripting console via the _com_liferay_layout_admin_web_portlet_   GroupPagesPortlet_backURL parameter. (CVE-2023-35030)

  - Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal   7.4.13.70 through 7.4.13.76, to redirect users to arbitrary external URLs via the 
  _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter. CVE-2023-35029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The detected install of Liferay Portal CE is between 7.4.3.70 and 7.4.3.76. It is therefore affected by multiple vulnerabilities:

  - Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration   in Liferay Portal 7.4.3.70 through 7.4.3.76 allows remote attackers to execute arbitrary   code in the scripting console via the _com_liferay_layout_admin_web_portlet_   GroupPagesPortlet_backURL parameter. (CVE-2023-35030)

  - Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal   7.4.3.70 through 7.4.3.76, to redirect users to arbitrary external URLs via the 
  _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter. CVE-2023-35029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
432647	SCA: security update for com.liferay.portal:release.portal.bom (GHSA-22w7-m5f8-87vh)	Tenable Cloud Security	SCA Checks	medium
432647	SCA: security update for com.liferay.portal:release.portal.bom (GHSA-22w7-m5f8-87vh)	Tenable Self-Hosted Container Security	SCA Checks	medium
177740	Liferay DXP 7.4.13.70 < x < 7.4.13.77 Multiple vulnerabilities	Nessus	CGI abuses	high
177522	Liferay Portal CE 7.4.3.70 < x < 7.4.3.77 Multiple vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2023-35029

medium

Tenable Plugins

medium

medium

high

high