Search for packages
| purl | pkg:maven/com.liferay.portal/com.liferay.portal.kernel@2.3.0 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-mf3r-6m25-3867
Aliases: CVE-2025-3526 |
Liferay Portal SessionClicks does not restrict the saving of request parameters in the HTTP session SessionClicks in Liferay Portal 7.0.0 … |
Vulnerable |
|
GHSA-h4m4-xp33-37mj
Aliases: CVE-2025-43770 |
Liferay Portal vulnerable to Reflected XSS with the referer and forward parameter A reflected cross-site scripting (XSS) vulnerability in the … |
Not vulnerable |
|
GHSA-xvgg-9h29-4g34
Aliases: CVE-2025-43793 |
Liferay Portal has Improper Validation of Specified Quantity in Input Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and … |
Vulnerable |
|
GHSA-vp64-77c6-33h8
Aliases: CVE-2025-43792 |
Liferay Portal has External Control of System or Configuration Settings Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older … |
Vulnerable |
|
GHSA-w7pm-cc4v-f3g8
Aliases: CVE-2020-7961 |
Deserialization of Untrusted Data in Liferay Portal prior to 7.2.1 CE GA2 allows remote attackers to execute arbitrary code via … |
Vulnerable |
|
GHSA-43h9-p3j4-39hm
Aliases: CVE-2024-25607 |
Liferay Portal defaults to a low work factor for the default password hashing algorithm The default password hashing algorithm (PBKDF2-HMAC-SHA1) … |
Vulnerable |