Junglewise Threat Intelligence

CVE-2023-42629: Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page

CVE-2023-42629 · Severity: low · CVSS 3.1 · Published 2023-10-17

Technologies: com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.

Executive brief

Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page

Affected products

  • Maven com.liferay:com.liferay.asset.categories.admin.web
  • Maven com.liferay.portal:release.dxp.bom

Related threats