Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal
    7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute
    arbitrary code in the scripting console via the
    `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter. (CVE-2023-35030)

The detected install of Liferay DXP is between 7.4.13.70 and 7.4.13.76. It is therefore affected by multiple vulnerabilities:

  - Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration   in Liferay Portal 7.4.13.70 through 7.4.13.76 allows remote attackers to execute arbitrary   code in the scripting console via the _com_liferay_layout_admin_web_portlet_   GroupPagesPortlet_backURL parameter. (CVE-2023-35030)

  - Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal   7.4.13.70 through 7.4.13.76, to redirect users to arbitrary external URLs via the 
  _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter. CVE-2023-35029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The detected install of Liferay Portal CE is between 7.4.3.70 and 7.4.3.76. It is therefore affected by multiple vulnerabilities:

  - Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration   in Liferay Portal 7.4.3.70 through 7.4.3.76 allows remote attackers to execute arbitrary   code in the scripting console via the _com_liferay_layout_admin_web_portlet_   GroupPagesPortlet_backURL parameter. (CVE-2023-35030)

  - Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal   7.4.3.70 through 7.4.3.76, to redirect users to arbitrary external URLs via the 
  _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter. CVE-2023-35029)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
432665	SCA: security update for com.liferay.portal:release.portal.bom (GHSA-p2fc-xxr8-fw3p)	Tenable Cloud Security	SCA Checks	high
432665	SCA: security update for com.liferay.portal:release.portal.bom (GHSA-p2fc-xxr8-fw3p)	Tenable Self-Hosted Container Security	SCA Checks	high
177740	Liferay DXP 7.4.13.70 < x < 7.4.13.77 Multiple vulnerabilities	Nessus	CGI abuses	high
177522	Liferay Portal CE 7.4.3.70 < x < 7.4.3.77 Multiple vulnerabilities	Nessus	CGI abuses	high

Detections

Analytics

CVE-2023-35030

high

Tenable Plugins

high

high

high

high