Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.liferay/com.liferay.portal.workflow.task.web@3.0.2
Typemaven
Namespacecom.liferay
Namecom.liferay.portal.workflow.task.web
Version3.0.2
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version5.0.75
Latest_non_vulnerable_version5.0.75
Affected_by_vulnerabilities
0
url VCID-brjh-tyur-ebc8
vulnerability_id VCID-brjh-tyur-ebc8
summary 
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting
A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 through 7.4.3.128, and Liferay DXP 2024 Q2.0 through 2024.Q2.9, 2024.Q1.1 through 2024.Q1.12, and 7.4 update 45 through update 92 allows remote attackers to execute an arbitrary web script or HTML in the My Workflow Tasks page.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-43785
reference_id
reference_type
scores
0
value 0.00041
scoring_system epss
scoring_elements 0.1281
published_at 2026-06-05T12:55:00Z
1
value 0.00041
scoring_system epss
scoring_elements 0.12815
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-43785
1
reference_url https://github.com/liferay/liferay-portal
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal
2
reference_url https://github.com/liferay/liferay-portal/commit/5f1a7c347c81f05848f032a9e25cbc9abaab05ff
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal/commit/5f1a7c347c81f05848f032a9e25cbc9abaab05ff
3
reference_url https://liferay.atlassian.net/browse/LPE-18074
reference_id
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://liferay.atlassian.net/browse/LPE-18074
4
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43785
reference_id CVE-2025-43785
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2025-09-10T18:50:21Z/
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43785
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-43785
reference_id CVE-2025-43785
reference_type
scores
0
value 4.6
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-43785
6
reference_url https://github.com/advisories/GHSA-66x6-8jgv-qpfh
reference_id GHSA-66x6-8jgv-qpfh
reference_type
scores
url https://github.com/advisories/GHSA-66x6-8jgv-qpfh
fixed_packages
0
url pkg:maven/com.liferay/com.liferay.portal.workflow.task.web@5.0.75
purl pkg:maven/com.liferay/com.liferay.portal.workflow.task.web@5.0.75
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay/com.liferay.portal.workflow.task.web@5.0.75
aliases CVE-2025-43785, GHSA-66x6-8jgv-qpfh
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-brjh-tyur-ebc8
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.liferay/com.liferay.portal.workflow.task.web@3.0.2