The Translation module in Liferay... CVE-2022-38512

- AV AC AU C I A
发布： 2022-09-22
修订： 2024-11-21

The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page's XLIFF translation file via crafted URL.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有31条受影响产品信息