All products

com.liferay:com.liferay.object.service

Maven · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Liferay Portal is vulnerable to Insecure Direct Object Reference (IDOR) attack through Authentication BypassCVE-2025-43790 · GHSA-5WXC-3JFW-W94P com.liferay:com.liferay.object.service Maven High Fix reported
Liferay Portal and DXP Instance Admin can execute code using Objects Actions and ValidationsCVE-2025-3586 · GHSA-M5GV-VJ3F-6V2P com.liferay:com.liferay.object.service Maven High Fix reported
Liferay Portal is vulnerable to SSRF through custom object attachment fieldsCVE-2025-43763 · GHSA-477Q-X55M-J38G com.liferay:com.liferay.object.service Maven Medium Fix reported