CVE-2017-1000425

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Cross-site scripting (XSS) vulnerability in the /html/portal/flash.jsp page in Liferay Portal CE 7.0 GA4 and older allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in the "movie" parameter.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/cst-7030-multiple-xss-vulnerabilities-in-7-0-ce-ga4Patch, Vendor Advisory
https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da925a5ec860a43d18c031Patch, Third Party Advisory
https://dev.liferay.com/web/community-security-team/known-vulnerabilities/-/asset_publisher/4AHAYapUm8Xc/content/cst-7030-multiple-xss-vulnerabilities-in-7-0-ce-ga4Patch, Vendor Advisory
https://github.com/liferay/liferay-portal/commit/9435af4ef8a90b5333da925a5ec860a43d18c031Patch, Third Party Advisory

Timeline

Published: Jan 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-10004266.1MapProxy version 1.10.3 and older is vulnerable to a Cross Site Scripting attack in the demo service resulting in possible information discl CVE-2017-10004276.1marked version 0.3.6 and earlier is vulnerable to an XSS attack in the data: URI parser.CVE-2017-10004286.1flatCore-CMS 1.4.6 is vulnerable to reflected XSS in user_management.php due to the use of $_SERVER['PHP_SELF'] to build links and a stored CVE-2017-10004296.1rui Li finecms 5.0.10 is vulnerable to a reflected XSS in the file Weixin.php.CVE-2017-10004309.8rust-base64 version <= 0.5.1 is vulnerable to a buffer overflow when calculating the size of a buffer to use when encoding base64 using the CVE-2017-10004316.1eZ Systems eZ Publish version 5.4.0 to 5.4.9, and 5.3.12 and older, is vulnerable to an XSS issue in the search module, resulting in a risk CVE-2017-10004328.0Vanilla Forums below 2.1.5 are affected by CSRF leading to Deleting topics and comments from forums Admin access CVE-2017-10004338.1pysaml2 version 4.4.0 and older accept any password when run with python optimizations enabled. This allows attackers to log in as any user CVE-2017-10004346.1Wordpress plugin Furikake version 0.1.0 is vulnerable to an Open Redirect The furikake-redirect parameter on a page allows for a redirect to CVE-2017-10004379.8Creolabs Gravity 1.0 contains a stack based buffer overflow in the operator_string_add function, resulting in remote code execution.CVE-2017-10004388.3In OMERO 5.3.3 or earlier a user could create an OriginalFile and adjust its path such that it now points to another user's file on the unde CVE-2017-10004425.4Passbolt API version 1.6.4 and older are vulnerable to a XSS in the url field on the password workspace