« Back to list

CVE-2023-35030

Status: ModifiedHigh (8.8)—

Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (2)

Liferay — DXPLiferay — Liferay Portal

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2023-35030",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-35030",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-22T15:48:29.662822Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security@liferay.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.8,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@liferay.com",
      "affectedData": [
        {
          "vendor": "Liferay",
          "product": "Portal",
          "versions": [
            {
              "status": "affected",
              "version": "7.4.3.70",
              "versionType": "maven",
              "lessThanOrEqual": "7.4.3.76"
            }
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Liferay",
          "product": "DXP",
          "versions": [
            {
              "status": "affected",
              "version": "7.4.13.u70",
              "versionType": "maven",
              "lessThanOrEqual": "7.4.13.u76"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-06-15T05:15:09.857",
  "references": [
    {
      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35030",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "security@liferay.com"
    },
    {
      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35030",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@liferay.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-352"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter."
    }
  ],
  "lastModified": "2026-06-17T06:04:17.587",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_70:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3A210A40-99B5-40D6-BBB8-E0E30FADED2E"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_71:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9ED1C984-729C-4994-B041-12AD82ABB7FB"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_72:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "998F01FB-913B-4224-8413-D62ACCF570E7"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_73:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F18E6353-E96E-4FD6-8CEE-28A30C70AC82"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_74:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6102A1C7-26E5-4830-A87F-C7142671261E"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_75:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "57374266-D3DA-4E50-8B4B-19ED8343AC9D"
            },
            {
              "criteria": "cpe:2.3:a:liferay:dxp:7.4:update_76:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "93CCCAAE-8B59-4F59-91E9-860F4313521C"
            },
            {
              "criteria": "cpe:2.3:a:liferay:liferay_portal:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9014083-2E75-4403-9C1D-C4F07C8DB877",
              "versionEndExcluding": "7.4.3.77",
              "versionStartIncluding": "7.4.3.70"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security@liferay.com"
}