Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/com.liferay.util.java@2.5.4
purl pkg:maven/com.liferay.portal/com.liferay.util.java@2.5.4
Next non-vulnerable version 14.0.0
Latest non-vulnerable version 14.0.0
Risk score 3.6
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-w397-9p2j-6x23
Aliases:
CVE-2022-28977
Liferay Portal and Liferay DXP HtmlUtil.escapeRedirect Can Be Circumvented HtmlUtil.escapeRedirect in Liferay Portal 7.3.1 through 7.4.2, and Liferay DXP 7.0 … There are no reported fixed by versions.
GHSA-869h-qhfx-w939
Aliases:
CVE-2024-25606
Liferay Portal has an XXE vulnerability in Java2WsddTask._format XXE vulnerability in Liferay Portal 7.2.0 through 7.4.3.7, and older unsupported versions, …
14.0.0
Not vulnerable
This package is not known to fix any advisories.