com.liferay:com.liferay.asset.taglib@4.2.27 vulnerabilities
-
latest version
11.0.4
-
latest non vulnerable version
-
first published
8 years ago
-
latest version published
7 days ago
-
licenses detected
- [1.0.0,)
-
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.liferay:com.liferay.asset.taglib package. This does not include vulnerabilities belonging to this package’s dependencies.
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.| Vulnerability | Vulnerable Version |
|---|---|
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via a crafted payload injected into the name of a tag. How to fix Cross-site Scripting (XSS)? Upgrade |
[,6.1.9)
|
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) via injection of a web script or HTML in the name of an asset category. How to fix Cross-site Scripting (XSS)? Upgrade |
[,6.1.0)
|
com.liferay:com.liferay.asset.taglib is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the Asset module's category selector input field. It allows remote attackers to inject arbitrary web script or HTML via the How to fix Cross-site Scripting (XSS)? Upgrade |
[,5.2.53)
|