Moderate severityNVD Advisory· Published Feb 20, 2024· Updated Aug 28, 2024

CVE-2023-44308

Description

Open redirect vulnerability in adaptive media administration page in Liferay DXP 2023.Q3 before patch 6, and 7.4 GA through update 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_adaptive_media_web_portlet_AMPortlet_redirect parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
com.liferay:com.liferay.adaptive.media.webMaven	>= 2023.Q3, < 2023.Q3.6	2023.Q3.6
com.liferay:com.liferay.adaptive.media.webMaven	>= 7.4.0, <= 7.4.13.u92	—

Affected products

ghsa-coords
pkg:maven/com.liferay/com.liferay.adaptive.media.web
Range: >= 2023.Q3, < 2023.Q3.6
Liferay/DXPcpe-rescue
Range: 2023.q3.1

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-3mrr-cw9q-727mghsaADVISORY
liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44308ghsavendor-advisoryWEB
nvd.nist.gov/vuln/detail/CVE-2023-44308ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.260
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000