Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.portal.kernel@130.0.1
purl pkg:maven/com.liferay.portal/com.liferay.portal.kernel@130.0.1
Next non-vulnerable version 155.0.0
Latest non-vulnerable version 155.0.0
Risk score 3.1
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-h4m4-xp33-37mj
Aliases:
CVE-2025-43770
Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter A reflected cross-site scripting (XSS) vulnerability in the …
155.0.0
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-xvgg-9h29-4g34
Liferay Portal has Improper Validation of Specified Quantity in Input Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and … CVE-2025-43793
GHSA-vp64-77c6-33h8
Liferay Portal has External Control of System or Configuration Settings Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older … CVE-2025-43792