Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.portal.kernel@125.0.0
purl pkg:maven/com.liferay.portal/com.liferay.portal.kernel@125.0.0
Next non-vulnerable version 155.0.0
Latest non-vulnerable version 155.0.0
Risk score 3.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
GHSA-h4m4-xp33-37mj
Aliases:
CVE-2025-43770
Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter A reflected cross-site scripting (XSS) vulnerability in the …
155.0.0
Not vulnerable
GHSA-xvgg-9h29-4g34
Aliases:
CVE-2025-43793
Liferay Portal has Improper Validation of Specified Quantity in Input Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and …
130.0.1
Vulnerable
GHSA-vp64-77c6-33h8
Aliases:
CVE-2025-43792
Liferay Portal has External Control of System or Configuration Settings Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older …
130.0.1
Vulnerable
This package is not known to fix any advisories.