Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:maven/com.liferay/com.liferay.journal.service@6.0.106
Typemaven
Namespacecom.liferay
Namecom.liferay.journal.service
Version6.0.106
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version7.0.161
Latest_non_vulnerable_version7.0.161
Affected_by_vulnerabilities
0
url VCID-b64x-y9tr-qqfv
vulnerability_id VCID-b64x-y9tr-qqfv
summary 
Liferay Portal stored cross-site scripting in text field of the web content structure
A Stored cross-site scripting vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.13 and 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the text field from a web content.
references
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2025-43765
reference_id
reference_type
scores
0
value 0.00046
scoring_system epss
scoring_elements 0.14748
published_at 2026-06-05T12:55:00Z
1
value 0.00046
scoring_system epss
scoring_elements 0.14755
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2025-43765
1
reference_url https://github.com/liferay/liferay-portal
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal
2
reference_url https://github.com/liferay/liferay-portal/commit/6aa0adb0e8d47794e942fd87074cf05755a2d9bc
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal/commit/6aa0adb0e8d47794e942fd87074cf05755a2d9bc
3
reference_url https://liferay.atlassian.net/browse/LPE-18150
reference_id
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://liferay.atlassian.net/browse/LPE-18150
4
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43765
reference_id CVE-2025-43765
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-08-25T18:44:49Z/
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43765
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-43765
reference_id CVE-2025-43765
reference_type
scores
0
value 6.9
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2025-43765
6
reference_url https://github.com/advisories/GHSA-h8gx-4hhm-w45v
reference_id GHSA-h8gx-4hhm-w45v
reference_type
scores
url https://github.com/advisories/GHSA-h8gx-4hhm-w45v
fixed_packages
0
url pkg:maven/com.liferay/com.liferay.journal.service@7.0.161
purl pkg:maven/com.liferay/com.liferay.journal.service@7.0.161
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay/com.liferay.journal.service@7.0.161
aliases CVE-2025-43765, GHSA-h8gx-4hhm-w45v
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-b64x-y9tr-qqfv
Fixing_vulnerabilities
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:maven/com.liferay/com.liferay.journal.service@6.0.106