com.liferay:com.liferay.dynamic.data.mapping.service@4.0.38 vulnerabilities
latest version
8.0.9
latest non vulnerable version
first published
8 years ago
latest version published
1 months ago
licenses detected
- [1.0.0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the com.liferay:com.liferay.dynamic.data.mapping.service package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
com.liferay:com.liferay.dynamic.data.mapping.service is an is designed to work within your existing business processes and technologies to build a custom solution that uniquely meets your need Affected versions of this package are vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') via the Note: This is only exploitable if the attacker has remote authenticated access. How to fix Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')? Upgrade | [,6.0.36) |
com.liferay:com.liferay.dynamic.data.mapping.service is an is designed to work within your existing business processes and technologies to build a custom solution that uniquely meets your need Affected versions of this package are vulnerable to Access Restriction Bypass due to the How to fix Access Restriction Bypass? Upgrade | [,6.0.43) |
com.liferay:com.liferay.dynamic.data.mapping.service is an is designed to work within your existing business processes and technologies to build a custom solution that uniquely meets your need Affected versions of this package are vulnerable to Access Restriction Bypass which incorrectly sets default permissions for site members, allowing authenticated attackers to add and duplicate forms via the UI or the API. How to fix Access Restriction Bypass? Upgrade | [,4.0.39) |
com.liferay:com.liferay.dynamic.data.mapping.service is an is designed to work within your existing business processes and technologies to build a custom solution that uniquely meets your need Affected versions of this package are vulnerable to Improper Authorization. It does not properly check user permissions, which allows remote attackers with How to fix Improper Authorization? Upgrade | [,5.2.0) |
com.liferay:com.liferay.dynamic.data.mapping.service is an is designed to work within your existing business processes and technologies to build a custom solution that uniquely meets your need Affected versions of this package are vulnerable to Insufficiently Protected Credentials. It does not sanitise the information returned by the How to fix Insufficiently Protected Credentials? Upgrade | [,2.7.3)[3.0.0,3.0.94)[4.0.0,4.0.57)[5.0.1,5.1.0) |