Vulnerability Database
289,784
Total vulnerabilities in the database
CVE-2022-42125
Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through update 34 allows attackers to create or overwrite existing files on the filesystem via the deployment of a malicious plugin/module.
| Software | From | Fixed in |
|---|---|---|
| liferay / digital_experience_platform | 7.4-update34 | 7.4-update34.x |
| liferay / digital_experience_platform | 7.4-update1 | 7.4-update1.x |
| liferay / liferay_portal | 7.4.3.5 | 7.4.3.36 |
com.liferay.portal / release.portal.bom
|
7.4.3.5 | 7.4.3.48 |