CVE-2022-45320: Liferay Digital Experience Platform

Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days.

Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.

Affected products

• Liferay Digital Experience Platform: before 7.2 (fixed in 7.2); version 7.2 only; version 7.3 only; version 7.4 only
• Liferay Liferay Portal: before 7.4.3.16 (fixed in 7.4.3.16)

Published 2024-02-20. Last modified 2026-06-17.