212 matches found
CVE-2025-43813
Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...
CVE-2025-43813
Summary (CVE-2025-43813) : Liferay Portal (ComboServlet) is vulnerable to path traversal in affected versions (Portal 7.4.0–7.4.3.107, older unsupported; Liferay DXP 2023.Q3/Q4 series; related 7.4/7.3 GA updates). The flaw allows remote attackers to access arbitrary CSS/JS files and load them rep...
CVE-2025-43813: Improper Limitation of a Pathname to a Restricted Directory
Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.107, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, 7.3 GA through update 35, and older...
Liferay Portal and Liferay DXP path traversal vulnerabilities
Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: GHSA-68X2-MX4Q-78M7...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: OSV:GHSA-68X2-MX4Q-78M7...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory:...
super-jss (>=0.0.1-beta.25, <=0.0.1-beta.30) potentially affected by CVE-2025-59052 via @angular/platform-server (20.0.0)
@angular/platform-server NPM version 20.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @angular/platform-server and may be impacted: - super-jss =0.0.1-beta.25, =0.0.1-beta.30 Source cves: CVE-2025-59052 Source advisory: MEND:CVE-2025-59052...
CVE-2020-36850
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...
CVE-2020-36850
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...
CVE-2020-36850 Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...
CVE-2020-36850
CVE-2020-36850 affects Sitecore JSS React Sample Application versions 11.0.0 through 14.0.1, with an information-disclosure flaw that may cause page content intended for one user to be shown to another user. The connected sources consistently describe a cross-user data exposure but do not provide...
CVE-2020-36850 Sitecore JSS React Sample Application 11.0.0 - 14.0.1 Information Disclosure
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...
CVE-2020-36850: Exposure of Sensitive Information to an Unauthorized Actor
An information disclosure vulnerability exits in Sitecore JSS React Sample Application 11.0.0 - 14.0.1 that may cause page content intended for one user to be shown to another user...
PT-2025-30883 · Sitecore · Sitecore Jss React Sample Application
Name of the Vulnerable Software and Affected Versions: Sitecore JSS React Sample Application versions 11.0.0 through 14.0.1 Description: An information disclosure issue exists that may allow page content intended for one user to be displayed to another user. Recommendations: Sitecore JSS React...
Malware in jss-0.8.4
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
MAL-2025-5931 Malicious code in jss-0.8.4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8111edf0983ef24837eb9f58a2a819f4c99f34a3243fddf898c0e4588f01e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in jss-0.8.4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 46d8111edf0983ef24837eb9f58a2a819f4c99f34a3243fddf898c0e4588f01e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
jss bug fix and enhancement update
An update is available for jss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Linux 9.4...