Skip to content
OpenAdvisories
Medium · 6.1 CVE-2017-12649 EUVD-2017-4188GHSA-6q67-5wvc-rmw9

Liferay Portal Vulnerable to XSS via Mishandled Title or Summary in the Web Content Display

Published Aug 7, 2017 · Updated Sep 17, 2024 · Assigned by mitre

Package: com.liferay.portal:release.portal.bom Ecosystem: Maven

Description

XSS exists in Liferay Portal before 7.0 CE GA4 via a crafted title or summary that is mishandled in the Web Content Display.

Affected packages

EcosystemPackageAffectedFixedRecord
Maven com.liferay.portal:release.portal.bom < 7.0.3-ga4 7.0.3-ga4 GHSA-6q67-5wvc-rmw9

References