Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-42126

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-642h-mx8q-47p2

Missing permissions check in Liferay Portal The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.

gitlab/maven/com.liferay.portal/release.portal.bom/CVE-2022-42126

Missing permissions check in Liferay Portal The Asset Libraries module in Liferay Portal 7.3.5 through 7.4.3.28, and Liferay DXP 7.3 before update 8, and DXP 7.4 before update 29 does not properly check permissions of asset libraries, which allows remote authenticated users to view asset libraries via the UI.