Search for packages
| purl | pkg:maven/com.liferay.portal/release.dxp.bom@2023.Q3 |
| Tags | Ghost |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.3 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-f3rf-cr7f-cwc4
Aliases: CVE-2023-5190 |
Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page Open redirect vulnerability in the … | There are no reported fixed by versions. |
|
GHSA-xq4r-4xfh-vch8
Aliases: CVE-2024-26270 |
Liferay Portal and Liferay DXP vulnerable to theft of hashed password The Account Settings page in Liferay Portal 7.4.3.76 through … | There are no reported fixed by versions. |
|
GHSA-q2cv-7j58-rfmj
Aliases: CVE-2023-47795 |
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting Stored cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-468x-frcm-ghx6
Aliases: CVE-2023-40191 |
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in the instance settings for … | There are no reported fixed by versions. |
|
GHSA-73x3-8mrg-5r93
Aliases: CVE-2023-42498 |
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability in … | There are no reported fixed by versions. |
|
GHSA-54pv-r62j-9qqc
Aliases: CVE-2023-42496 |
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting Reflected cross-site scripting (XSS) vulnerability on the add assignees to … | There are no reported fixed by versions. |