Description
XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.liferay.portal:release.portal.bom | < 7.0.3-ga4 | 7.0.3-ga4 | GHSA-75x7-w445-5gwr |
Medium · 6.1
CVE-2017-12647
EUVD-2017-4186GHSA-75x7-w445-5gwr
Liferay Portal Vulnerable to XSS via a Knowledge Base Article Title
Published Aug 7, 2017 · Updated Sep 16, 2024 · Assigned by mitre