Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

com.liferay.portal:portal-service

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
Maven Central

Advisories 2

  • Liferay Portal through 6.2.10 allows remote authenticated users to execute arbitrary shell commands via a crafted Velocity template.

    Affected: fixed in 6.2.11.

  • Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache…

    Affected: from 5.0.0, fixed in 6.0.6-ga.