← Database

CVE-2022-42131

MEDIUM CVSS: 4.8 Published: 2022-11-15 Modified: 2026-07-09

Description

Certain Liferay products are affected by: Missing SSL Certificate Validation in the Dynamic Data Mapping module's REST data providers. This affects Liferay Portal 7.1.0 through 7.4.2 and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, and 7.3 before service pack 3.

Affected Platforms

Liferay Liferay PortalLiferay Digital Experience Platform

Weakness Type

CWE-295, CWE-295

References