{"action":"Upgrade com.liferay.portal:release.dxp.bom to 7.4.13.u54 or later.","affected":[{"fixed":"7.4.13.u54","introduced":"7.4.0"}],"component":"com.liferay.portal:release.dxp.bom","cve_ids":["CVE-2023-44309"],"ecosystem":"Maven","epss":0.00575,"exploited":false,"fixed_versions":["7.4.13.u54"],"ghsa_id":"GHSA-j663-6jpj-xx8c","id":"tcs_01M5N924205ZZV012M3PBSK7BB","modified_at":"2025-08-08T22:12:01.320308Z","published_at":"2023-10-17T09:30:23Z","references":["https://osv.dev/vulnerability/GHSA-j663-6jpj-xx8c","https://nvd.nist.gov/vuln/detail/CVE-2023-44309","https://github.com/liferay/liferay-portal/commit/1287c68486d60b87179995d8b8bd530031300a47","https://github.com/liferay/liferay-portal/commit/28f8a7aabccce45e9d60cfb0cf63fc53c99b0d26","https://github.com/liferay/liferay-portal/commit/9031a7a03e5891e7ccf762011fe8bcc2e433b1db","https://github.com/liferay/liferay-portal/commit/ba628735cfae8656ab4243ecffce260413ed2460","https://github.com/liferay/liferay-portal/commit/d70fecd2c5709d8dd5f4992b408a640ce912001b","https://github.com/liferay/liferay-portal/commit/e45bf2d00ed7f95f02702a1da3e4115ab30b1bff","https://github.com/liferay/liferay-portal/commit/ed856dd9e2947e3e660d7cfbdb8c604b296db790","https://github.com/liferay/liferay-portal","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-44309"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-j663-6jpj-xx8c#Maven/com.liferay.portal:release.dxp.bom","url":"https://osv.dev/vulnerability/GHSA-j663-6jpj-xx8c"}],"summary":"Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components"}