Known Vulnerabilities with Liferay AntiSamy

The following issue may compromise the security of your Liferay Digital Experience Platform implementation. 

Vulnerability Information

The Liferay AntiSamy app depends on third party libraries that have known vulnerabilities.

Affected Products

• Liferay AntiSamy 2.0.x (for Liferay Portal 6.2 EE GA1)
• Liferay CE AntiSamy 2.0.x (For Liferay Portal 6.2 CE GA1)

Note: Liferay AntiSamy is a Lab Application. Liferay Subscription Services does not offer assistance, guidance or product resolutions for Lab Applications. The installation and usage of a Liferay Marketplace Lab Application is the responsibility of the customer.

Resolution

Update the affected dependencies listed below: 

Affected library	Vulnerability information	Resolution
batik-css.jar, batik-util.jar	View	Upgrade to version 1.14 or later
antisamy.jar	View	Upgrade to version 1.6.4 or later