Skip to content
OpenAdvisories
Medium · 6.1 CVE-2017-12648 EUVD-2017-4187GHSA-cm99-x97g-9qx8

Liferay Portal XSS Vulnerability

Published Aug 7, 2017 · Updated Sep 16, 2024 · Assigned by mitre

Package: com.liferay:com.liferay.frontend.taglib Package: com.liferay.portal:release.portal.bom Ecosystem: Maven

Description

XSS exists in Liferay Portal before 7.0 CE GA4 via a bookmark URL.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.liferay:com.liferay.frontend.taglib < 2.1.3 2.1.3 GHSA-cm99-x97g-9qx8
Maven com.liferay.portal:release.portal.bom < 7.0.3-GA4 7.0.3-GA4 GHSA-cm99-x97g-9qx8

References