Detections
Analytics

Liferay Portal 7.4.x < 7.4.3.5 XSS

medium Nessus Plugin ID 190933

Language:

Version 1.3

May 15, 2025, 5:17 AM

  • Detection (remove script_exclude_keys for CGI scanning)

Plugin Feed: 202505150517

Version 1.2

Jan 28, 2025, 7:30 AM

  • CVSS metrics ("CVSSv2 score" set to 5.5)
  • CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:S/C:P/I:P/A:N")
  • CVSS metrics ("CVSSv3 score" set to 5.4)
  • CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N")
  • CVSSv2 severity (based on CVE-2024-25603, severity increased from "Low" to "Medium")
  • CVSSv3 severity (based on None, severity decreased from "High" to "Medium")

Plugin Feed: 202501280730

Version 1.1

Jun 5, 2024, 10:55 AM

  • Required Scan configuration ("Enable cgi scanning" set to "True")

Plugin Feed: 202406051055

Version 1.0

Feb 23, 2024, 8:24 PM

  • New

Plugin Feed: 202402232024

* Changelogs are generally available for changes made after Nov 1, 2022