Description

XSS exists in Liferay Portal before 7.0 CE GA4 via a Knowledge Base article title.

Remediation

References

https://github.com/brianchandotcom/liferay-portal/pull/48901

https://dev.liferay.com/web/community-security-team/known-vulnerabilities/liferay-portal-70/-/asset_publisher/cjE0ourZXJZE/content/cst-7017-multiple-xss-vulnerabilities

Related Vulnerabilities

CVE-2023-46499 Vulnerability in npm package @evershop/evershop

CVE-2023-30547 Vulnerability in npm package vm2

CVE-2023-40349 Vulnerability in maven package org.jenkins-ci.plugins:gogs-webhook

CVE-2017-2585 Vulnerability in maven package org.keycloak:keycloak-server-spi-private

CVE-2022-21227 Vulnerability in npm package sqlite3

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Patch Third Party Advisory Vendor Advisory