
com.liferay.portal:com.liferay.portal.impl
maven · Contains implementation for the portal services. · Repository · Package
Security Advisories for com.liferay.portal:com.liferay.portal.impl in maven
Moderate
3 days ago
Liferay Portal vulnerable to path traversal and denial-of-service in the ComboServlet
maven
com.liferay.portal:com.liferay.portal.impl, com.liferay.portal:release.portal.bom
Moderate
13 days ago
Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability
maven
com.liferay.portal:com.liferay.portal.impl
Moderate
16 days ago
Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC
maven
com.liferay.portal:com.liferay.portal.impl
Moderate
17 days ago
Liferay Portal has Improper Validation of Specified Quantity in Input
maven
com.liferay.portal:com.liferay.portal.kernel, com.liferay.portal:com.liferay.portal.impl
Moderate
17 days ago
Liferay Portal has stored cross-site scripting (XSS) vulnerability
maven
com.liferay.portal:com.liferay.portal.impl
Moderate
about 1 month ago
Liferay Portal JSONWS API endpoint shares sensitive information
maven
com.liferay.portal:com.liferay.portal.impl
Moderate
about 2 months ago
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability
maven
com.liferay.portal:com.liferay.portal.impl, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.portal.bom
High
over 1 year ago
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
maven
com.liferay.portal:release.dxp.bom, com.liferay.portal:com.liferay.portal.impl
Moderate
almost 3 years ago
Liferay Portal Insecure Default Configuration in auth.login.prompt.enabled
maven
com.liferay.portal:com.liferay.portal.impl, com.liferay.portal:release.portal.bom
High
over 3 years ago
Liferay Portal and Liferay DXP fails to invalidate password reset tokens after use
maven
com.liferay.portal:release.dxp.bom, com.liferay.portal:com.liferay.portal.impl
High
over 3 years ago
Liferay Portal and Liferay DXP insecure default configuration
maven
com.liferay.portal:release.portal.bom, com.liferay.portal:com.liferay.portal.impl
Moderate
over 3 years ago
Liferay Portal and Liferay DXP Bypass via Double Encoded URL
maven
com.liferay.portal:com.liferay.portal.impl, com.liferay.portal:release.portal.bom, com.liferay.portal:release.dxp.bom
Moderate
over 3 years ago
Liferay Portal and Liferay DXP fails to check permissions to view sites/groups
maven
com.liferay.portal:com.liferay.portal.impl, com.liferay:com.liferay.site.browser.web, com.liferay.portal:release.dxp.bom, com.liferay.portal:release.portal.bom