Skip to content
OpenAdvisories

Package · Maven

com.liferay:com.liferay.object.web

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2025-43758

    Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry

    Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15 and 7.4 GA through update 92 allows unauthenticated user…

    Liferay DXP Portal com.liferay:com.liferay.frontend.js.web Maven
  • Medium 5.4
    CVE-2022-42115

    Liferay Portal Vulnerable to XSS in the Object Module

    Cross-site scripting (XSS) vulnerability in the Object module's edit object details page in Liferay Portal 7.4.3.4 through 7.4.3.36 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into the object field's `Label` t…

    com.liferay:com.liferay.object.web Maven