Liferay Portal is vulnerable to XSS attack through its search bar portlet

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-43781 · ADVISORY
• liferay/liferay-portal commit f6483b5 · WEB
• liferay/liferay-portal · PACKAGE
• liferay.atlassian.net/browse/LPE-18124 · WEB
• liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43781 · WEB

com.liferay:com.liferay.portal.search.web のその他の脆弱性

• CVE-2022-42118中 6.1A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix…
• CVE-2022-42112中 5.4A Cross-site scripting (XSS) vulnerability in the Portal Search module's Sort widget in Liferay Portal 7.2.0 through 7.4.3.24, and Liferay D…
• CVE-2022-28979中 6.1Liferay Portal v7.1.0 through v7.4.2 and Liferay DXP 7.1 before fix pack 26, 7.2 before fix pack 15, and 7.3 before service pack 3 was disco…
• CVE-2016-3670中 6.1Cross-site scripting (XSS) vulnerability in users.jsp in the Profile Search functionality in Liferay before 7.0.0 CE RC1 allows remote attac…