CVE-2022-42119 Liferay Portal and Liferay DXP Vulnerable to XSS via the Commerce Module
MediumCVSS 5.4
EPSS 0.49%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Certain Liferay products are vulnerable to Cross Site Scripting (XSS) via the Commerce module. This affects Liferay Portal 7.3.5 through 7.4.2 and Liferay DXP 7.3 before update 8.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | < 4.0.8 | 4.0.8 |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.0 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.1 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.10 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.11 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.12 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.13 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.14 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.15 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.16 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.17 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.18 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.19 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.2 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.20 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.21 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.22 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.23 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.24 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.25 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.26 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.27 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.28 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.29 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.3 | No fix listed |
Show 83 more
| Product | Affected versions | Fixed in |
|---|---|---|
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.30 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.31 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.32 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.33 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.34 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.35 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.36 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.37 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.38 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.39 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.4 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.40 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.41 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.42 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.43 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.44 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.45 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.5 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.6 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.7 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.8 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 1.0.9 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.0 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.1 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.2 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.3 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.4 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.5 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.6 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 2.0.7 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.0 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.1 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.10 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.11 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.12 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.13 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.14 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.15 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.16 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.17 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.18 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.19 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.2 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.20 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.21 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.22 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.23 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.24 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.3 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.4 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.5 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.6 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.7 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.8 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 3.0.9 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.0 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.1 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.2 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.3 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.4 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.5 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.6 | No fix listed |
| com.liferay.commerce/com.liferay.commerce.catalog.web(Maven) | = 4.0.7 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | >= 7.3.0, < 7.3.10.u8 | 7.3.10.u8 |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.ep3 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.ep4 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.ep5 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.fp1 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.fp2 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.u4 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.u5 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.u6 | No fix listed |
| com.liferay.portal/release.dxp.bom(Maven) | = 7.3.10.u7 | No fix listed |
| liferay portal | >= 7.3.5, <= 7.4.2 | No fix listed |
| liferay DXP | = 7.3 | No fix listed |
| liferay DXP | = 7.3-update_1 | No fix listed |
| liferay DXP | = 7.3-update_2 | No fix listed |
| liferay DXP | = 7.3-update_3 | No fix listed |
| liferay DXP | = 7.3-update_4 | No fix listed |
| liferay DXP | = 7.3-update_5 | No fix listed |
| liferay DXP | = 7.3-update_6 | No fix listed |
| liferay DXP | = 7.3-update_7 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- issues.liferay.com issue-tracking vendor-advisory
- web.archive.org
- liferay.com
- github.com
- portal.liferay.dev vendor-advisory