liferay vulnerabilities (Bitnami)
44 vulnerabilities.
-
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module 9.6 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget 9.0 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class 9.6 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu 9.0 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components 9.0 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page 9.0 Critical -
liferayBitnami Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page 9.6 Critical -
liferayBitnami Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions 4.3 Medium -
liferayBitnami Liferay Portal has Inefficient Regular Expression 6.5 Medium -
liferayBitnami Insecure Default Initialization In Liferay Portal 5.3 Medium -
liferayBitnami Missing authorization in Liferay portal 5.3 Medium -
liferayBitnami Liferay portal has unauthorized access to object definition via search 2.7 Low -
liferayBitnami Liferay portal unauthorized access to objects via OAuth 2 scope 2.7 Low -
liferayBitnami SQL injection in Liferay Portal 6.4 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 4.8 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 5.4 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 5.4 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 6.1 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 4.8 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 5.4 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 4.8 Medium -
liferayBitnami Cross-site scripting in Liferay Portal 5.4 Medium -
liferayBitnami Liferay Portal and Liferay DXP Includes LDAP Credentials in the Page URL 5.9 Medium -
liferayBitnami Improper Certificate Validation in Liferay Portal 4.8 Medium -
liferayBitnami Incorrect Default Permissions in Liferay Portal 4.3 Medium -
liferayBitnami Authorization Bypass in Liferay Portal 4.3 Medium -
liferayBitnami Incorrect Default Permissions in Liferay Portal 5.3 Medium -
liferayBitnami Incorrect Default Permissions in Liferay Portal 5.3 Medium -
liferayBitnami Missing permissions check in Liferay Portal 4.3 Medium -
liferayBitnami Path Traversal in Liferay Portal 7.5 High -
liferayBitnami Inefficient Regular Expression Complexity in Liferay Portal 7.5 High -
liferayBitnami Path Traversal in Liferay Portal 7.5 High -
liferayBitnami Liferay Portal and Liferay DXP allows arbitrary injection via web content template names 6.1 Medium -
liferayBitnami Liferay Portal and Liferay DXP allows arbitrary injection via the site name 6.1 Medium -
liferayBitnami Liferay Portal and Liferay DXP fails to check permissions to view sites/groups 4.3 Medium -
liferayBitnami Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category 5.4 Medium -
liferayBitnami Liferay Portal and Liferay DXP fails to check origin of event messages 5.3 Medium -
liferayBitnami Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in the Gogo Shell module 5.4 Medium -
liferayBitnami Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page 5.4 Medium -
liferayBitnami Liferay Portal and Liferay DXP cross-site scripting (XSS) vulnerability via the script console 6.1 Medium -
liferayBitnami Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) 5.4 Medium -
liferayBitnami Liferay Portal and Liferay DXP fails to properly import users from LDAP 7.5 High -
liferayBitnami Liferay Portal and Liferay DXP has incorrect default permissions for site members 6.5 Medium -
liferayBitnami Unrestricted Upload of File with Dangerous Type in Liferay Portal and Liferay DXP 6.5 Medium