Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/release.dxp.bom@2024.Q1.13
purl pkg:maven/com.liferay.portal/release.dxp.bom@2024.Q1.13
Tags Ghost
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (7)

Advisory Summary Aliases
GHSA-9fcg-wrp8-qhr4
Liferay Portal and Liferay DXP Reveals Data via Forms The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and … CVE-2025-2565
CVE-2025-3760
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … GHSA-qhp6-vp7c-g7xp
CVE-2025-2565
Liferay Portal and Liferay DXP Reveals Data via Forms The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and … GHSA-9fcg-wrp8-qhr4
CVE-2025-43785
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 … GHSA-66x6-8jgv-qpfh
GHSA-qhp6-vp7c-g7xp
Liferay Cross-site Scripting vulnerability A stored cross-site scripting (XSS) vulnerability exists with radio button type custom fields in Liferay Portal … CVE-2025-3760
GHSA-hrc4-p2h3-pjqw
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, … CVE-2025-2536
GHSA-66x6-8jgv-qpfh
Liferay Portal and Liferay DXP vulnerable to Stored Cross-site Scripting A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.3.45 … CVE-2025-43785