Cross-site Scripting (XSS)

🗓️ 14 Jun 2023 02:24:34Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 11 Views

vulnerability in com.liferay.layout.taglib related to Cross-site Scripting (XSS) in URL text field

Reporter	Title	Published	Views	Family All 10
OSV	CVE-2023-33944	24 May 202316:15	–	osv
OSV	BIT-liferay-2023-33944	31 Jan 202415:18	–	osv
OSV	Cross-site scripting in Liferay Portal	24 May 202318:30	–	osv
NVD	CVE-2023-33944	24 May 202316:15	–	nvd
Tenable Nessus	Liferay Portal 7.3.4 <= 7.3.7 / 7.4.0 < 7.4.3.69 XSS	29 May 202300:00	–	nessus
Github Security Blog	Cross-site scripting in Liferay Portal	24 May 202318:30	–	github
CVE	CVE-2023-33944	24 May 202316:15	–	cve
Vulnrichment	CVE-2023-33944	24 May 202315:07	–	vulnrichment
Cvelist	CVE-2023-33944	24 May 202315:07	–	cvelist
Prion	Cross site scripting	24 May 202316:15	–	prion

Vulners

Node

-com.liferay.layout.taglibRange≤13.1.2

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2023-33944
github	www.github.com/liferay/liferay-portal/commit/7a57418658affcf3aefbc83c0db6b3af60b9e227
github	www.github.com/advisories/GHSA-pfwc-4frf-4gf8

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

14 Jun 2023 02:34Current

6.3Medium risk

Vulners AI Score6.3

CVSS36.1

EPSS0.001