VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Sep 22, 2022· Updated Jul 9, 2026

CVE-2022-39975

CVE-2022-39975

Description

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a "Content Page" type page, allowing attackers to view unpublished "Content Page" pages via URL manipulation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
com.liferay.portal:release.portal.bomMaven
>= 7.3.3, < 7.4.3.357.4.3.35

Affected products

47
  • Liferay/DXP44 versions
    cpe:2.3:a:liferay:dxp:7.3:-:*:*:*:*:*:*+ 43 more
    • cpe:2.3:a:liferay:dxp:7.3:-:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_1:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_2:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_3:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_4:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_5:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_6:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_7:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_8:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.3:update_9:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_10:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_11:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_12:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_13:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_14:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_15:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_16:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_17:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_18:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_19:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_1:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_20:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_21:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_22:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_23:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_24:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_25:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_26:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_27:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_28:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_29:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_2:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_30:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_31:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_32:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_33:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_34:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_3:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_4:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_5:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_6:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_7:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_8:*:*:*:*:*:*
    • cpe:2.3:a:liferay:dxp:7.4:update_9:*:*:*:*:*:*
  • Liferay/Portal
    cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*
    Range: >=7.3.3,<7.4.3.35
  • Liferay/Liferay Enterprise Portalcpe-rescue
  • ghsa-coords
    pkg:maven/com.liferay.portal/release.portal.bom
    Range: >= 7.3.3, < 7.4.3.35

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.