Liferay Portal 7.1.0-7.2.1 GA2 - Stored Cross-Site Scripting in User Account Name Fields
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2020-7934. PoCs published by 3ndG4me, giardinas-dev.
AI-analyzed exploit summary This is a proof-of-concept for a stored XSS vulnerability in LifeRay 7.2.1 GA2. It demonstrates credential phishing by prompting the user for email and password, then sending the captured data to an attacker-controlled server.
Description
In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payload, and it will be stored in the database. The payload will then be rendered when a user utilizes the search feature to search for other users (i.e., if a user with modified fields occurs in the search results). This issue was fixed in Liferay Portal CE version 7.3.0 GA1.
Exploits (3)
This is a proof-of-concept for a stored XSS vulnerability in LifeRay 7.2.1 GA2. It demonstrates credential phishing by prompting the user for email and password, then sending the captured data to an attacker-controlled server.
This repository contains a functional proof-of-concept for CVE-2020-7934, an authenticated stored XSS vulnerability in Liferay Portal 7.2.1 GA2. The exploit demonstrates how malicious JavaScript can be injected into user profile fields and executed when another user searches for the infected profile.
This repository contains a functional proof-of-concept for CVE-2020-7934, a stored XSS vulnerability in Liferay Portal 7.2.1 GA2. The exploit demonstrates credential phishing by injecting malicious JavaScript into a user's profile field, which executes when an admin views the user's details.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N