Description
XSS exists in Liferay Portal before 7.0 CE GA4 via an invalid portletId.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.liferay.portal:release.portal.bom | < 7.0.3-ga4 | 7.0.3-ga4 | GHSA-cvrj-cw2f-25qw |
Medium · 6.1
CVE-2017-12645
EUVD-2017-4184GHSA-cvrj-cw2f-25qw
Liferay Portal Vulnerable to XSS via an Invalid portletId
Published Aug 7, 2017 · Updated Sep 16, 2024 · Assigned by mitre