CVE-2023-37940

🗓️ 17 Dec 2024 21:39:30Reported by LiferayType

Cross-site scripting vulnerability in Liferay Portal allows attackers to inject web scripts remotely.

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2023-37940	17 Dec 202421:30	–	cvelist
NVD	CVE-2023-37940	17 Dec 202422:15	–	nvd
OSV	Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page	18 Dec 202400:31	–	osv
CVE	CVE-2023-37940	17 Dec 202422:15	–	cve
Github Security Blog	Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page	18 Dec 202400:31	–	github

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2023-37940

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Dec 2024 21:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS34.8

EPSS0.0004

SSVC

CWE-79