An Insecure direct object reference... CVE-2022-42129

- AV AC AU C I A
发布： 2022-11-15
修订： 2024-11-21

An Insecure direct object reference (IDOR) vulnerability in the Dynamic Data Mapping module in Liferay Portal 7.3.2 through 7.4.3.4, and Liferay DXP 7.3 before update 4, and 7.4 GA allows remote authenticated users to view and access form entries via the `formInstanceRecordId` parameter.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有3条受影响产品信息