Inefficient Regular Expression Complexity in Liferay Portal
High severity
GitHub Reviewed
Published
Nov 15, 2022
to the GitHub Advisory Database
•
Updated Aug 17, 2023
Package
Affected versions
>= 7.3.2, < 7.4.3.5
Patched versions
7.4.3.5
Description
Published by the National Vulnerability Database
Nov 15, 2022
Published to the GitHub Advisory Database
Nov 15, 2022
Reviewed
Nov 21, 2022
Last updated
Aug 17, 2023
ReDoS vulnerability in LayoutPageTemplateEntryUpgradeProcess in Liferay Portal 7.3.2 through 7.4.3.4 and Liferay DXP 7.2 fix pack 9 through fix pack 18, 7.3 before update 4, and DXP 7.4 GA allows remote attackers to consume an excessive amount of server resources via a crafted payload injected into the 'name' field of a layout prototype.
References