Maven/com.liferay.portal:release.dxp.bom CVE-2023-44309: critical 9, EPSS 0.57%
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Action: Upgrade com.liferay.portal:release.dxp.bom to 7.4.13.u54 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.4.0 | 7.4.13.u54 | - |
Fixed versions
| 7.4.13.u54 |
Sources
- osv: GHSA-j663-6jpj-xx8c#Maven/com.liferay.portal:release.dxp.bom
- https://nvd.nist.gov/vuln/detail/CVE-2023-44309
- https://github.com/liferay/liferay-portal/commit/1287c68486d60b87179995d8b8bd530031300a47
- https://github.com/liferay/liferay-portal/commit/28f8a7aabccce45e9d60cfb0cf63fc53c99b0d26
- https://github.com/liferay/liferay-portal/commit/9031a7a03e5891e7ccf762011fe8bcc2e433b1db
- https://github.com/liferay/liferay-portal/commit/ba628735cfae8656ab4243ecffce260413ed2460
- https://github.com/liferay/liferay-portal/commit/d70fecd2c5709d8dd5f4992b408a640ce912001b
- https://github.com/liferay/liferay-portal/commit/e45bf2d00ed7f95f02702a1da3e4115ab30b1bff
- https://github.com/liferay/liferay-portal/commit/ed856dd9e2947e3e660d7cfbdb8c604b296db790
- https://github.com/liferay/liferay-portal
- https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44309
CVE-2023-44309 · published · modified · JSON