← Database

CVE-2022-28981

HIGH CVSS: 7.5 Published: 2022-09-22 Modified: 2026-07-09

Description

Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter.

Affected Platforms

Liferay Liferay Portal

Weakness Type

CWE-22, CWE-22

References