Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/release.dxp.bom@2024.q1.0
purl pkg:maven/com.liferay.portal/release.dxp.bom@2024.q1.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-222w-xmc5-jhp3
Aliases:
CVE-2025-43735
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability A reflected cross-site scripting (XSS) vulnerability in the Liferay …
2024.q1.13
Vulnerable
2024.q1.13
Vulnerable
GHSA-m5c7-5gv3-hcpf
Aliases:
CVE-2025-43734
Liferay Portal 7.4.0 and Liferay DXP have a reflected cross-site scripting (XSS) vulnerability A reflected cross-site scripting (XSS) vulnerability in …
2024.q1.17
Vulnerable
This package is not known to fix any advisories.