-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe provided vulnerability reports and advisories do not include specific code examples, commit diffs, or file paths that would allow identification of exact vulnerable functions. While the vulnerability mechanism (XSS via unescaped Name field in App Builder) is clear, Liferay's implementation details for custom object rendering and form handling are not disclosed in the available resources. Without access to the actual code changes between vulnerable and patched versions, we cannot confidently identify specific functions responsible for input sanitization or output encoding in the custom object details page.
JavaJava| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| com.liferay.portal:release.portal.bom | maven | >= 7.3.0, < 7.4.1 | 7.4.1 |
Ongoing coverage of React2Shell