CVE-2023-3193: Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module
Summary
CVE-2023-3193: Liferay Portal and Liferay DXP Vulnerable to XSS via the Layout Module. Affects com.liferay.portal:release.portal.bom versions >= 7.4.3.70-ga70, < 7.4.3.74-ga74. Fixed in 7.4.3.74-ga74. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Liferay Portal is a popular open-source platform for building web applications and managing content. It provides a robust set of features for enterprise-level applications, including user management, content management, and collaboration tools. Liferay DXP is the commercial version that offers additional features and support. The vulnerability in question affects the Layout module's SEO configuration, which is responsible for managing the search engine optimization settings of web pages. This vulnerability allows attackers to exploit the system through cross-site scripting (XSS), potentially compromising user data and application integrity.
Vulnerability Detail
The vulnerability is a cross-site scripting (XSS) flaw found in the Layout module's SEO configuration in Liferay Portal versions 7.4.3.70 through 7.4.3.73 and Liferay DXP versions 7.4 update 70 through 73. It arises from improper handling of user input in the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter, allowing remote attackers to inject arbitrary web scripts or HTML. If exploited, this could lead to unauthorized actions being performed on behalf of users, data theft, or the distribution of malware.
How To Fix
Latest published version: 7.4.3.132 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
7.4.3.74-ga74
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation and sanitization for the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL parameter to mitigate the risk of XSS attacks. This can be done by ensuring that any user input is properly encoded before being rendered on the web page.
Conclusion
CVE-2023-3193 represents a significant security risk for users of Liferay Portal and Liferay DXP due to its potential for XSS attacks. It is crucial for users to update their systems to the latest patched versions to mitigate this vulnerability and protect their applications and users.
See every vulnerability recorded for com.liferay.portal:release.portal.bom →
FAQ
CVE-2023-3193 is a cross-site scripting (XSS) vulnerability affecting Liferay Portal and Liferay DXP, allowing attackers to inject malicious scripts through a specific parameter.
Liferay Portal versions 7.4.3.70 to 7.4.3.73 and Liferay DXP versions 7.4 update 70 to 73 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
Exploitation of this vulnerability could lead to unauthorized actions, data theft, or the distribution of malware, compromising user security and application integrity.
The CVSS score for CVE-2023-3193 is 6.1, indicating a moderate severity level.
References
Related vulnerabilities
Recent vulnerabilities recorded for com.liferay.portal:release.portal.bom.
