CVE-2023-35029: Open Redirect Vulnerability in Liferay Portal and Liferay DXP
Summary
CVE-2023-35029: Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module. Affects com.liferay.portal:release.portal.bom versions >= 7.4.3.70-ga70, < 7.4.3.77-ga77. Fixed in 7.4.3.77-ga77. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Liferay Portal and Liferay DXP are enterprise-level platforms designed for building digital experiences, including websites and applications. They provide various features such as content management, collaboration tools, and user management. The affected packages, 'com.liferay.portal:release.portal.bom' and 'com.liferay.portal:release.dxp.bom', are essential for managing dependencies in Liferay projects. However, they are vulnerable to an open redirect issue that can be exploited by attackers.
Vulnerability Detail
The vulnerability arises from an open redirect flaw in the Layout module's SEO configuration within Liferay Portal versions 7.4.3.70 through 7.4.3.76 and Liferay DXP versions 7.4 update 70 through 76. This flaw allows remote attackers to manipulate the '_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL' parameter, redirecting users to arbitrary external URLs. The potential ramifications include phishing attacks and unauthorized access to malicious sites, posing a significant security risk to users.
How To Fix
Latest published version: 7.4.3.132 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
7.4.3.77-ga77
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If immediate patching is not feasible, consider implementing input validation to sanitize the '_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL' parameter, ensuring it only accepts known safe URLs. This can help mitigate the risk of open redirects until the package is updated.
Conclusion
The open redirect vulnerability in Liferay Portal and Liferay DXP poses a significant risk to users by allowing attackers to redirect them to malicious sites. It is crucial to update the affected packages to their patched versions to mitigate this risk. Additionally, implementing input validation can serve as a temporary workaround until the update is applied.
See every vulnerability recorded for com.liferay.portal:release.portal.bom →
FAQ
An open redirect vulnerability allows attackers to redirect users to malicious websites by manipulating URL parameters, potentially leading to phishing attacks.
You can check if your application is affected by using Vulert, which monitors and alerts for open-source vulnerabilities in your software. Visit Vulert Scanner to analyze your pom.xml without needing to sign up.
Exploitation of this vulnerability can lead to users being redirected to harmful sites, resulting in data theft, malware infections, or phishing attacks.
To update your Maven dependencies, modify the version numbers in your pom.xml file for the affected packages and run 'mvn clean install' to apply the changes.
Yes, the CVSS score for this vulnerability is 6.1, indicating a moderate severity level.
Related vulnerabilities
Recent vulnerabilities recorded for com.liferay.portal:release.portal.bom.
