Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay.portal/release.dxp.bom@7.0.10.fp0
purl pkg:maven/com.liferay.portal/release.dxp.bom@7.0.10.fp0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 2.8
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-wcr5-3q96-c2gr
Aliases:
CVE-2021-29044
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via Membership Request Admin Page Cross-site scripting (XSS) vulnerability in …
7.0.10.fp97
Vulnerable
GHSA-g37f-j8hh-736f
Aliases:
CVE-2021-33334
Liferay Portal and Liferay DXP Fails to Properly Check User Permissions The Dynamic Data Mapping module in Liferay Portal 7.0.0 …
7.0.10.fp94
Vulnerable
GHSA-mj8w-h522-jwm8
Aliases:
CVE-2021-33331
Liferay Portal and Liferay DXP Allows Arbitrary Redirect of Users to External URLs Open redirect vulnerability in the Notifications module …
7.0.10.fp94
Vulnerable
GHSA-vpvm-3wfw-5f5c
Aliases:
CVE-2021-33328
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Scripting (XSS) in Edit Vocabulary Page Cross-site scripting (XSS) vulnerability in the … There are no reported fixed by versions.
This package is not known to fix any advisories.