← Back to CVE List

CVE-2022-28981

Published: 2022-09-22T01:15Z
Last Modified: 2024-11-21T06:58Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Path traversal vulnerability in the Hypermedia REST APIs module in Liferay Portal 7.4.0 through 7.4.2 allows remote attackers to access files outside of com.liferay.headless.discovery.web/META-INF/resources via the `parameter` parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt