Liferay Portal before 7.4.3.16 and Liferay DXP before 7.2 fix pack 19, 7.3 before update 6, and 7.4 before update 16 allow remote authenticated users to become the owner of a wiki page by editing the wiki page.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Digital_experience_platform | Liferay | * | 7.2 (excluding) |
| Digital_experience_platform | Liferay | 7.2 (including) | 7.2 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_1 (including) | 7.2-fix_pack_1 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_10 (including) | 7.2-fix_pack_10 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_11 (including) | 7.2-fix_pack_11 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_12 (including) | 7.2-fix_pack_12 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_13 (including) | 7.2-fix_pack_13 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_14 (including) | 7.2-fix_pack_14 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_15 (including) | 7.2-fix_pack_15 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_16 (including) | 7.2-fix_pack_16 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_17 (including) | 7.2-fix_pack_17 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_18 (including) | 7.2-fix_pack_18 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_2 (including) | 7.2-fix_pack_2 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_3 (including) | 7.2-fix_pack_3 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_4 (including) | 7.2-fix_pack_4 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_5 (including) | 7.2-fix_pack_5 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_6 (including) | 7.2-fix_pack_6 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_7 (including) | 7.2-fix_pack_7 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_8 (including) | 7.2-fix_pack_8 (including) |
| Digital_experience_platform | Liferay | 7.2-fix_pack_9 (including) | 7.2-fix_pack_9 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_1 (including) | 7.2-service_pack_1 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_2 (including) | 7.2-service_pack_2 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_3 (including) | 7.2-service_pack_3 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_4 (including) | 7.2-service_pack_4 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_5 (including) | 7.2-service_pack_5 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_6 (including) | 7.2-service_pack_6 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_7 (including) | 7.2-service_pack_7 (including) |
| Digital_experience_platform | Liferay | 7.2-service_pack_8 (including) | 7.2-service_pack_8 (including) |
| Digital_experience_platform | Liferay | 7.3 (including) | 7.3 (including) |
| Digital_experience_platform | Liferay | 7.3-fix_pack_1 (including) | 7.3-fix_pack_1 (including) |
| Digital_experience_platform | Liferay | 7.3-fix_pack_2 (including) | 7.3-fix_pack_2 (including) |
| Digital_experience_platform | Liferay | 7.3-service_pack_1 (including) | 7.3-service_pack_1 (including) |
| Digital_experience_platform | Liferay | 7.3-service_pack_3 (including) | 7.3-service_pack_3 (including) |
| Digital_experience_platform | Liferay | 7.3-update4 (including) | 7.3-update4 (including) |
| Digital_experience_platform | Liferay | 7.3-update5 (including) | 7.3-update5 (including) |
| Digital_experience_platform | Liferay | 7.4 (including) | 7.4 (including) |
| Digital_experience_platform | Liferay | 7.4-update1 (including) | 7.4-update1 (including) |
| Digital_experience_platform | Liferay | 7.4-update10 (including) | 7.4-update10 (including) |
| Digital_experience_platform | Liferay | 7.4-update11 (including) | 7.4-update11 (including) |
| Digital_experience_platform | Liferay | 7.4-update12 (including) | 7.4-update12 (including) |
| Digital_experience_platform | Liferay | 7.4-update13 (including) | 7.4-update13 (including) |
| Digital_experience_platform | Liferay | 7.4-update14 (including) | 7.4-update14 (including) |
| Digital_experience_platform | Liferay | 7.4-update15 (including) | 7.4-update15 (including) |
| Digital_experience_platform | Liferay | 7.4-update2 (including) | 7.4-update2 (including) |
| Digital_experience_platform | Liferay | 7.4-update3 (including) | 7.4-update3 (including) |
| Digital_experience_platform | Liferay | 7.4-update4 (including) | 7.4-update4 (including) |
| Digital_experience_platform | Liferay | 7.4-update5 (including) | 7.4-update5 (including) |
| Digital_experience_platform | Liferay | 7.4-update6 (including) | 7.4-update6 (including) |
| Digital_experience_platform | Liferay | 7.4-update7 (including) | 7.4-update7 (including) |
| Digital_experience_platform | Liferay | 7.4-update8 (including) | 7.4-update8 (including) |
| Digital_experience_platform | Liferay | 7.4-update9 (including) | 7.4-update9 (including) |
| Liferay_portal | Liferay | * | 7.4.3.16 (excluding) |