← Database

CVE-2022-42125

HIGH CVSS: 7.5 Published: 2022-11-15 Modified: 2026-07-09

Description

Zip slip vulnerability in FileUtil.unzip in Liferay Portal 7.4.3.5 through 7.4.3.35 and Liferay DXP 7.4 update 1 through update 34 allows attackers to create or overwrite existing files on the filesystem via the deployment of a malicious plugin/module.

Affected Platforms

Liferay Liferay PortalLiferay Digital Experience Platform

Weakness Type

CWE-22, CWE-22

References