Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-1me4-suy5-ayhq
Summary
Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
Open redirect vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to redirect users to arbitrary external URLs via the `_com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL` parameter.
Aliases
0
alias CVE-2023-35029
1
alias GHSA-22w7-m5f8-87vh
Fixed_packages
0
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u77
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u77
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27a1-teqk-cbe2
1
vulnerability VCID-42k1-vb9z-3qe7
2
vulnerability VCID-9hvg-h2ra-nbcc
3
vulnerability VCID-c3ym-wtv5-hfhr
4
vulnerability VCID-e5h2-wvws-3yhq
5
vulnerability VCID-ebzh-bpks-5qe2
6
vulnerability VCID-ezpm-x3vx-zfe6
7
vulnerability VCID-tqvb-a46r-jbf8
8
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u77
1
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.78
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.78
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-27a1-teqk-cbe2
3
vulnerability VCID-292m-hgvs-93ey
4
vulnerability VCID-2bcr-bxek-skfq
5
vulnerability VCID-2dra-x6f5-xybz
6
vulnerability VCID-2mtb-mdha-qufv
7
vulnerability VCID-3hm3-htje-akgd
8
vulnerability VCID-434b-p73k-5fam
9
vulnerability VCID-4kym-jhtn-cfa3
10
vulnerability VCID-4xqq-69ab-1qew
11
vulnerability VCID-5732-ffyz-9fh5
12
vulnerability VCID-5bex-xcub-3qhr
13
vulnerability VCID-5nq8-gsav-5ffq
14
vulnerability VCID-68yp-31d3-zbay
15
vulnerability VCID-6yrk-8tj5-juhp
16
vulnerability VCID-8xx2-vtnr-dubu
17
vulnerability VCID-b24q-c9nx-hkdy
18
vulnerability VCID-brjh-tyur-ebc8
19
vulnerability VCID-by7b-2zr9-y3dj
20
vulnerability VCID-ca62-h2qv-v7bg
21
vulnerability VCID-ce9p-rwsz-zkf6
22
vulnerability VCID-d56y-s4zt-uyd7
23
vulnerability VCID-e5h2-wvws-3yhq
24
vulnerability VCID-ebzh-bpks-5qe2
25
vulnerability VCID-ej5y-geq1-pkfn
26
vulnerability VCID-evap-nt9g-akf6
27
vulnerability VCID-g41m-xvk2-xfda
28
vulnerability VCID-ggmh-6ef8-7ufj
29
vulnerability VCID-gyge-7d5c-6uhz
30
vulnerability VCID-hvpx-y297-sbha
31
vulnerability VCID-j3pc-gwg6-qfbs
32
vulnerability VCID-ksvn-b6hv-hfa7
33
vulnerability VCID-mbd8-z3ry-cqap
34
vulnerability VCID-mf9a-eusx-f3gb
35
vulnerability VCID-nhp5-61h7-ryf4
36
vulnerability VCID-pf71-p73a-xyda
37
vulnerability VCID-qy5u-7m7g-4ben
38
vulnerability VCID-r363-kggk-k3ds
39
vulnerability VCID-rns1-e6pd-tkex
40
vulnerability VCID-rs2y-3c75-uycm
41
vulnerability VCID-s86p-ew9a-rkgt
42
vulnerability VCID-su57-hncy-5qg4
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-tf5n-etq9-2bg1
45
vulnerability VCID-turp-jxv8-1fgy
46
vulnerability VCID-w7z4-h1ug-z3cq
47
vulnerability VCID-wpqk-8fd9-p3ex
48
vulnerability VCID-xn1n-5rgc-83bg
49
vulnerability VCID-xv4h-g41b-c7c7
50
vulnerability VCID-y1wd-arvg-2ugt
51
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.78
Affected_packages
0
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u70
1
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u71
2
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u72
3
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-t18w-rg4b-fqea
10
vulnerability VCID-tqvb-a46r-jbf8
11
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u73
4
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-tqvb-a46r-jbf8
10
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u74
5
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u75
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u75
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-tqvb-a46r-jbf8
10
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u75
6
url pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u76
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u76
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-27a1-teqk-cbe2
2
vulnerability VCID-42k1-vb9z-3qe7
3
vulnerability VCID-9epf-zkmr-67a6
4
vulnerability VCID-9hvg-h2ra-nbcc
5
vulnerability VCID-c3ym-wtv5-hfhr
6
vulnerability VCID-e5h2-wvws-3yhq
7
vulnerability VCID-ebzh-bpks-5qe2
8
vulnerability VCID-ezpm-x3vx-zfe6
9
vulnerability VCID-tqvb-a46r-jbf8
10
vulnerability VCID-xe2v-j69t-d3h3
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.dxp.bom@7.4.13.u76
7
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1me4-suy5-ayhq
1
vulnerability VCID-9epf-zkmr-67a6
2
vulnerability VCID-t18w-rg4b-fqea
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.70-ga70
8
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.71
9
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.72
10
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.73
11
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-s86p-ew9a-rkgt
43
vulnerability VCID-sw28-urg9-tqgd
44
vulnerability VCID-t18w-rg4b-fqea
45
vulnerability VCID-tf5n-etq9-2bg1
46
vulnerability VCID-turp-jxv8-1fgy
47
vulnerability VCID-uun9-ctyg-k3d9
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-y1wd-arvg-2ugt
52
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.74
12
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-rs2y-3c75-uycm
43
vulnerability VCID-s86p-ew9a-rkgt
44
vulnerability VCID-su57-hncy-5qg4
45
vulnerability VCID-sw28-urg9-tqgd
46
vulnerability VCID-tf5n-etq9-2bg1
47
vulnerability VCID-turp-jxv8-1fgy
48
vulnerability VCID-uun9-ctyg-k3d9
49
vulnerability VCID-w7z4-h1ug-z3cq
50
vulnerability VCID-wpqk-8fd9-p3ex
51
vulnerability VCID-xn1n-5rgc-83bg
52
vulnerability VCID-y1wd-arvg-2ugt
53
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.75
13
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.76
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.76
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-rs2y-3c75-uycm
43
vulnerability VCID-s86p-ew9a-rkgt
44
vulnerability VCID-su57-hncy-5qg4
45
vulnerability VCID-sw28-urg9-tqgd
46
vulnerability VCID-tf5n-etq9-2bg1
47
vulnerability VCID-turp-jxv8-1fgy
48
vulnerability VCID-uun9-ctyg-k3d9
49
vulnerability VCID-w7z4-h1ug-z3cq
50
vulnerability VCID-wpqk-8fd9-p3ex
51
vulnerability VCID-xn1n-5rgc-83bg
52
vulnerability VCID-xv4h-g41b-c7c7
53
vulnerability VCID-y1wd-arvg-2ugt
54
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.76
14
url pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.77
purl pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.77
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-11qf-d5xp-4fey
1
vulnerability VCID-1jgz-k7zp-uydp
2
vulnerability VCID-1me4-suy5-ayhq
3
vulnerability VCID-27a1-teqk-cbe2
4
vulnerability VCID-292m-hgvs-93ey
5
vulnerability VCID-2bcr-bxek-skfq
6
vulnerability VCID-2dra-x6f5-xybz
7
vulnerability VCID-2mtb-mdha-qufv
8
vulnerability VCID-3hm3-htje-akgd
9
vulnerability VCID-434b-p73k-5fam
10
vulnerability VCID-4kym-jhtn-cfa3
11
vulnerability VCID-4xqq-69ab-1qew
12
vulnerability VCID-5732-ffyz-9fh5
13
vulnerability VCID-5bex-xcub-3qhr
14
vulnerability VCID-5nq8-gsav-5ffq
15
vulnerability VCID-68yp-31d3-zbay
16
vulnerability VCID-6yrk-8tj5-juhp
17
vulnerability VCID-8xx2-vtnr-dubu
18
vulnerability VCID-9epf-zkmr-67a6
19
vulnerability VCID-b24q-c9nx-hkdy
20
vulnerability VCID-brjh-tyur-ebc8
21
vulnerability VCID-by7b-2zr9-y3dj
22
vulnerability VCID-ca62-h2qv-v7bg
23
vulnerability VCID-ce9p-rwsz-zkf6
24
vulnerability VCID-d56y-s4zt-uyd7
25
vulnerability VCID-e5h2-wvws-3yhq
26
vulnerability VCID-ebzh-bpks-5qe2
27
vulnerability VCID-ej5y-geq1-pkfn
28
vulnerability VCID-evap-nt9g-akf6
29
vulnerability VCID-g41m-xvk2-xfda
30
vulnerability VCID-ggmh-6ef8-7ufj
31
vulnerability VCID-gyge-7d5c-6uhz
32
vulnerability VCID-hvpx-y297-sbha
33
vulnerability VCID-j3pc-gwg6-qfbs
34
vulnerability VCID-ksvn-b6hv-hfa7
35
vulnerability VCID-mbd8-z3ry-cqap
36
vulnerability VCID-mf9a-eusx-f3gb
37
vulnerability VCID-nhp5-61h7-ryf4
38
vulnerability VCID-pf71-p73a-xyda
39
vulnerability VCID-qy5u-7m7g-4ben
40
vulnerability VCID-r363-kggk-k3ds
41
vulnerability VCID-rns1-e6pd-tkex
42
vulnerability VCID-rs2y-3c75-uycm
43
vulnerability VCID-s86p-ew9a-rkgt
44
vulnerability VCID-su57-hncy-5qg4
45
vulnerability VCID-sw28-urg9-tqgd
46
vulnerability VCID-tf5n-etq9-2bg1
47
vulnerability VCID-turp-jxv8-1fgy
48
vulnerability VCID-w7z4-h1ug-z3cq
49
vulnerability VCID-wpqk-8fd9-p3ex
50
vulnerability VCID-xn1n-5rgc-83bg
51
vulnerability VCID-xv4h-g41b-c7c7
52
vulnerability VCID-y1wd-arvg-2ugt
53
vulnerability VCID-ynk1-3fye-bfcx
resource_url http://public2.vulnerablecode.io/packages/pkg:maven/com.liferay.portal/release.portal.bom@7.4.3.77
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2023-35029
reference_id
reference_type
scores
0
value 0.00403
scoring_system epss
scoring_elements 0.61225
published_at 2026-06-05T12:55:00Z
1
value 0.00403
scoring_system epss
scoring_elements 0.61218
published_at 2026-06-07T12:55:00Z
2
value 0.00403
scoring_system epss
scoring_elements 0.61232
published_at 2026-06-06T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2023-35029
1
reference_url https://github.com/liferay/liferay-portal
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/liferay/liferay-portal
2
reference_url https://liferay.atlassian.net/browse/LPE-17403
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://liferay.atlassian.net/browse/LPE-17403
3
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35029?p_r_p_assetEntryId=121861874&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121861874%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35029?p_r_p_assetEntryId=121861874&_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_redirect=https%3A%2F%2Fliferay.dev%3A443%2Fportal%2Fsecurity%2Fknown-vulnerabilities%3Fp_p_id%3Dcom_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt%26p_p_lifecycle%3D0%26p_p_state%3Dnormal%26p_p_mode%3Dview%26p_r_p_assetEntryId%3D121861874%26_com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_jekt_cur%3D0%26p_r_p_resetCur%3Dfalse
4
reference_url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35029
reference_id cve-2023-35029
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:N/A:N/T:P/P:M/B:A/M:M/D:T/2024-10-22T15:41:37Z/
url https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-35029
5
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-35029
reference_id CVE-2023-35029
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2023-35029
6
reference_url https://github.com/advisories/GHSA-22w7-m5f8-87vh
reference_id GHSA-22w7-m5f8-87vh
reference_type
scores
0
value MODERATE
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-22w7-m5f8-87vh
Weaknesses
0
cwe_id 601
name URL Redirection to Untrusted Site ('Open Redirect')
description A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-1me4-suy5-ayhq