Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3.5
purl pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3.5
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (6)

Advisory Summary Aliases
GHSA-chj2-4vg7-hhg3
Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console The Script Console in Liferay Portal 7.0.0 through … CVE-2024-8980
GHSA-xq4r-4xfh-vch8
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … CVE-2024-26270
CVE-2024-8980
Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console The Script Console in Liferay Portal 7.0.0 through … GHSA-chj2-4vg7-hhg3
CVE-2024-26270
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … GHSA-xq4r-4xfh-vch8
CVE-2023-42498
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in … GHSA-73x3-8mrg-5r93
GHSA-73x3-8mrg-5r93
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in … CVE-2023-42498