Liferay Portal Leak: `doAsUserId` URL Parameter May Be Leaked
CVE-2024-25148

8.1HIGH

Key Information:

Vendor

Liferay
Status
Portal
Dxp
Vendor
CVE Published:
8 February 2024

What is CVE-2024-25148?

In specific versions of Liferay Portal and Liferay DXP, a vulnerability exists related to the handling of the doAsUserId URL parameter during the content creation process via the WYSIWYG editor. This issue affects versions 7.2.0 through 7.4.1 and older unsupported releases of Liferay Portal, as well as Liferay DXP 7.3 before service pack 3 and Liferay DXP 7.2 before fix pack 15. Authenticated users may inadvertently expose the doAsUserId parameter, which could enable unauthorized user impersonation when accessing linked content. As a result, this vulnerability poses significant security risks within applications leveraging these versions.

Affected Version(s)

DXP 7.3.10 <= 7.3.10-dxp-2

DXP 7.2.10 <= 7.2.10-dxp-14

Portal 7.2.0 <= 7.4.1

References

https://liferay.dev/portal/security/known-vulnerabilities...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.