CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25609

HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.12, and older unsupported versions, and Liferay DXP 7.4 before update 9, 7.3 service pack 3, 7.2 fix pack 15 through 18, and older unsupported versions can be circumvented by using two forward slashes, which allows remote attackers to redirect users to arbitrary external URLs via the (1) 'redirect` parameter (2) `FORWARD_URL` parameter, and (3) others parameters that rely on HtmlUtil.escapeRedirect. This vulnerability is the result of an incomplete fix in CVE-2022-28977.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.1%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2024-25609

Liferay » Digital Experience Platform » Version: N/A

cpe:2.3:a:liferay:digital_experience_platform:-
Liferay » Digital Experience Platform » Version: 6.2

cpe:2.3:a:liferay:digital_experience_platform:6.2
Liferay » Digital Experience Platform » Version: 7.0

cpe:2.3:a:liferay:digital_experience_platform:7.0
Liferay » Digital Experience Platform » Version: 7.1

cpe:2.3:a:liferay:digital_experience_platform:7.1
Liferay » Digital Experience Platform » Version: 7.2

cpe:2.3:a:liferay:digital_experience_platform:7.2
Liferay » Digital Experience Platform » Version: 7.3

cpe:2.3:a:liferay:digital_experience_platform:7.3
Liferay » Digital Experience Platform » Version: 7.4

cpe:2.3:a:liferay:digital_experience_platform:7.4
Liferay » Liferay Portal » Version: N/A

cpe:2.3:a:liferay:liferay_portal:-
Liferay » Liferay Portal » Version: 1.7.5

cpe:2.3:a:liferay:liferay_portal:1.7.5
Liferay » Liferay Portal » Version: 1.8.0

cpe:2.3:a:liferay:liferay_portal:1.8.0
Liferay » Liferay Portal » Version: 1.9.0

cpe:2.3:a:liferay:liferay_portal:1.9.0
Liferay » Liferay Portal » Version: 1.9.1

cpe:2.3:a:liferay:liferay_portal:1.9.1
Liferay » Liferay Portal » Version: 1.9.5

cpe:2.3:a:liferay:liferay_portal:1.9.5
Liferay » Liferay Portal » Version: 2.0.0

cpe:2.3:a:liferay:liferay_portal:2.0.0
Liferay » Liferay Portal » Version: 2.0.3

cpe:2.3:a:liferay:liferay_portal:2.0.3
Liferay » Liferay Portal » Version: 2.1.0

cpe:2.3:a:liferay:liferay_portal:2.1.0
Liferay » Liferay Portal » Version: 2.1.1

cpe:2.3:a:liferay:liferay_portal:2.1.1
Liferay » Liferay Portal » Version: 2.2.0

cpe:2.3:a:liferay:liferay_portal:2.2.0
Liferay » Liferay Portal » Version: 2.2.1

cpe:2.3:a:liferay:liferay_portal:2.2.1
Liferay » Liferay Portal » Version: 2.2.5

cpe:2.3:a:liferay:liferay_portal:2.2.5
Liferay » Liferay Portal » Version: 3.0.0

cpe:2.3:a:liferay:liferay_portal:3.0.0
Liferay » Liferay Portal » Version: 3.1.0

cpe:2.3:a:liferay:liferay_portal:3.1.0
Liferay » Liferay Portal » Version: 3.2.0

cpe:2.3:a:liferay:liferay_portal:3.2.0
Liferay » Liferay Portal » Version: 3.5.0

cpe:2.3:a:liferay:liferay_portal:3.5.0
Liferay » Liferay Portal » Version: 3.6.0

cpe:2.3:a:liferay:liferay_portal:3.6.0
Liferay » Liferay Portal » Version: 3.6.1

cpe:2.3:a:liferay:liferay_portal:3.6.1
Liferay » Liferay Portal » Version: 4.0.0

cpe:2.3:a:liferay:liferay_portal:4.0.0
Liferay » Liferay Portal » Version: 4.1.0

cpe:2.3:a:liferay:liferay_portal:4.1.0
Liferay » Liferay Portal » Version: 4.1.1

cpe:2.3:a:liferay:liferay_portal:4.1.1
Liferay » Liferay Portal » Version: 4.1.2

cpe:2.3:a:liferay:liferay_portal:4.1.2
Liferay » Liferay Portal » Version: 4.1.3

cpe:2.3:a:liferay:liferay_portal:4.1.3
Liferay » Liferay Portal » Version: 4.2.0

cpe:2.3:a:liferay:liferay_portal:4.2.0
Liferay » Liferay Portal » Version: 4.2.1

cpe:2.3:a:liferay:liferay_portal:4.2.1
Liferay » Liferay Portal » Version: 4.2.2

cpe:2.3:a:liferay:liferay_portal:4.2.2
Liferay » Liferay Portal » Version: 4.3.0

cpe:2.3:a:liferay:liferay_portal:4.3.0
Liferay » Liferay Portal » Version: 4.3.1

cpe:2.3:a:liferay:liferay_portal:4.3.1
Liferay » Liferay Portal » Version: 4.3.2

cpe:2.3:a:liferay:liferay_portal:4.3.2
Liferay » Liferay Portal » Version: 4.3.3

cpe:2.3:a:liferay:liferay_portal:4.3.3
Liferay » Liferay Portal » Version: 4.3.4

cpe:2.3:a:liferay:liferay_portal:4.3.4
Liferay » Liferay Portal » Version: 4.3.5

cpe:2.3:a:liferay:liferay_portal:4.3.5
Liferay » Liferay Portal » Version: 4.3.6

cpe:2.3:a:liferay:liferay_portal:4.3.6
Liferay » Liferay Portal » Version: 4.4.0

cpe:2.3:a:liferay:liferay_portal:4.4.0
Liferay » Liferay Portal » Version: 4.4.1

cpe:2.3:a:liferay:liferay_portal:4.4.1
Liferay » Liferay Portal » Version: 4.4.2

cpe:2.3:a:liferay:liferay_portal:4.4.2
Liferay » Liferay Portal » Version: 5.0.0

cpe:2.3:a:liferay:liferay_portal:5.0.0
Liferay » Liferay Portal » Version: 5.1.0

cpe:2.3:a:liferay:liferay_portal:5.1.0
Liferay » Liferay Portal » Version: 5.1.1

cpe:2.3:a:liferay:liferay_portal:5.1.1
Liferay » Liferay Portal » Version: 5.1.2

cpe:2.3:a:liferay:liferay_portal:5.1.2
Liferay » Liferay Portal » Version: 5.2

cpe:2.3:a:liferay:liferay_portal:5.2
Liferay » Liferay Portal » Version: 5.2.0

cpe:2.3:a:liferay:liferay_portal:5.2.0
Liferay » Liferay Portal » Version: 5.2.1

cpe:2.3:a:liferay:liferay_portal:5.2.1
Liferay » Liferay Portal » Version: 5.2.2

cpe:2.3:a:liferay:liferay_portal:5.2.2
Liferay » Liferay Portal » Version: 5.2.3

cpe:2.3:a:liferay:liferay_portal:5.2.3
Liferay » Liferay Portal » Version: 6.0

cpe:2.3:a:liferay:liferay_portal:6.0
Liferay » Liferay Portal » Version: 6.0.0

cpe:2.3:a:liferay:liferay_portal:6.0.0
Liferay » Liferay Portal » Version: 6.0.1

cpe:2.3:a:liferay:liferay_portal:6.0.1
Liferay » Liferay Portal » Version: 6.0.2

cpe:2.3:a:liferay:liferay_portal:6.0.2
Liferay » Liferay Portal » Version: 6.0.3

cpe:2.3:a:liferay:liferay_portal:6.0.3
Liferay » Liferay Portal » Version: 6.0.4

cpe:2.3:a:liferay:liferay_portal:6.0.4
Liferay » Liferay Portal » Version: 6.0.5

cpe:2.3:a:liferay:liferay_portal:6.0.5
Liferay » Liferay Portal » Version: 6.0.6

cpe:2.3:a:liferay:liferay_portal:6.0.6
Liferay » Liferay Portal » Version: 6.1

cpe:2.3:a:liferay:liferay_portal:6.1
Liferay » Liferay Portal » Version: 6.1.0

cpe:2.3:a:liferay:liferay_portal:6.1.0
Liferay » Liferay Portal » Version: 6.1.1

cpe:2.3:a:liferay:liferay_portal:6.1.1
Liferay » Liferay Portal » Version: 6.1.2

cpe:2.3:a:liferay:liferay_portal:6.1.2
Liferay » Liferay Portal » Version: 6.1.2_ce_ga3

cpe:2.3:a:liferay:liferay_portal:6.1.2_ce_ga3
Liferay » Liferay Portal » Version: 6.1.x_ee

cpe:2.3:a:liferay:liferay_portal:6.1.x_ee
Liferay » Liferay Portal » Version: 6.2

cpe:2.3:a:liferay:liferay_portal:6.2
Liferay » Liferay Portal » Version: 6.2.0

cpe:2.3:a:liferay:liferay_portal:6.2.0
Liferay » Liferay Portal » Version: 6.2.1

cpe:2.3:a:liferay:liferay_portal:6.2.1
Liferay » Liferay Portal » Version: 6.2.2

cpe:2.3:a:liferay:liferay_portal:6.2.2
Liferay » Liferay Portal » Version: 6.2.3

cpe:2.3:a:liferay:liferay_portal:6.2.3
Liferay » Liferay Portal » Version: 6.2.4

cpe:2.3:a:liferay:liferay_portal:6.2.4
Liferay » Liferay Portal » Version: 6.2.5

cpe:2.3:a:liferay:liferay_portal:6.2.5
Liferay » Liferay Portal » Version: 6.2.x_ee

cpe:2.3:a:liferay:liferay_portal:6.2.x_ee
Liferay » Liferay Portal » Version: 7.0

cpe:2.3:a:liferay:liferay_portal:7.0
Liferay » Liferay Portal » Version: 7.0.0

cpe:2.3:a:liferay:liferay_portal:7.0.0
Liferay » Liferay Portal » Version: 7.0.1

cpe:2.3:a:liferay:liferay_portal:7.0.1
Liferay » Liferay Portal » Version: 7.0.2

cpe:2.3:a:liferay:liferay_portal:7.0.2
Liferay » Liferay Portal » Version: 7.0.3

cpe:2.3:a:liferay:liferay_portal:7.0.3
Liferay » Liferay Portal » Version: 7.0.3_ga4

cpe:2.3:a:liferay:liferay_portal:7.0.3_ga4
Liferay » Liferay Portal » Version: 7.0.4

cpe:2.3:a:liferay:liferay_portal:7.0.4
Liferay » Liferay Portal » Version: 7.0.5

cpe:2.3:a:liferay:liferay_portal:7.0.5
Liferay » Liferay Portal » Version: 7.0.6

cpe:2.3:a:liferay:liferay_portal:7.0.6
Liferay » Liferay Portal » Version: 7.1

cpe:2.3:a:liferay:liferay_portal:7.1
Liferay » Liferay Portal » Version: 7.1.0

cpe:2.3:a:liferay:liferay_portal:7.1.0
Liferay » Liferay Portal » Version: 7.1.1

cpe:2.3:a:liferay:liferay_portal:7.1.1
Liferay » Liferay Portal » Version: 7.1.2

cpe:2.3:a:liferay:liferay_portal:7.1.2
Liferay » Liferay Portal » Version: 7.1.3

cpe:2.3:a:liferay:liferay_portal:7.1.3
Liferay » Liferay Portal » Version: 7.2

cpe:2.3:a:liferay:liferay_portal:7.2
Liferay » Liferay Portal » Version: 7.2.0

cpe:2.3:a:liferay:liferay_portal:7.2.0
Liferay » Liferay Portal » Version: 7.2.1

cpe:2.3:a:liferay:liferay_portal:7.2.1
Liferay » Liferay Portal » Version: 7.3

cpe:2.3:a:liferay:liferay_portal:7.3
Liferay » Liferay Portal » Version: 7.3.0

cpe:2.3:a:liferay:liferay_portal:7.3.0
Liferay » Liferay Portal » Version: 7.3.1

cpe:2.3:a:liferay:liferay_portal:7.3.1
Liferay » Liferay Portal » Version: 7.3.2

cpe:2.3:a:liferay:liferay_portal:7.3.2
Liferay » Liferay Portal » Version: 7.3.3

cpe:2.3:a:liferay:liferay_portal:7.3.3
Liferay » Liferay Portal » Version: 7.3.4

cpe:2.3:a:liferay:liferay_portal:7.3.4
Liferay » Liferay Portal » Version: 7.3.5

cpe:2.3:a:liferay:liferay_portal:7.3.5
Liferay » Liferay Portal » Version: 7.3.6

cpe:2.3:a:liferay:liferay_portal:7.3.6
Liferay » Liferay Portal » Version: 7.3.7

cpe:2.3:a:liferay:liferay_portal:7.3.7
Liferay » Liferay Portal » Version: 7.4.0

cpe:2.3:a:liferay:liferay_portal:7.4.0
Liferay » Liferay Portal » Version: 7.4.1

cpe:2.3:a:liferay:liferay_portal:7.4.1
Liferay » Liferay Portal » Version: 7.4.2

cpe:2.3:a:liferay:liferay_portal:7.4.2
Liferay » Liferay Portal » Version: 7.4.3.10

cpe:2.3:a:liferay:liferay_portal:7.4.3.10
Liferay » Liferay Portal » Version: 7.4.3.11

cpe:2.3:a:liferay:liferay_portal:7.4.3.11
Liferay » Liferay Portal » Version: 7.4.3.12

cpe:2.3:a:liferay:liferay_portal:7.4.3.12
Liferay » Liferay Portal » Version: 7.4.3.4

cpe:2.3:a:liferay:liferay_portal:7.4.3.4
Liferay » Liferay Portal » Version: 7.4.3.5

cpe:2.3:a:liferay:liferay_portal:7.4.3.5
Liferay » Liferay Portal » Version: 7.4.3.6

cpe:2.3:a:liferay:liferay_portal:7.4.3.6
Liferay » Liferay Portal » Version: 7.4.3.7

cpe:2.3:a:liferay:liferay_portal:7.4.3.7
Liferay » Liferay Portal » Version: 7.4.3.8

cpe:2.3:a:liferay:liferay_portal:7.4.3.8
Liferay » Liferay Portal » Version: 7.4.3.9

cpe:2.3:a:liferay:liferay_portal:7.4.3.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25609

Products

Pricing

Contact Us