https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T23:34:42.428934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2023-avi-0892 certfr-2023-avi-0892 — De multiples vulnérabilités ont été découvertes dans les produits Liferay. Elles permettent à un attaquant de provoquer… 2026-10-23T23:34:42.432691+00:00 certfr-2023-avi-0892 https://cve.radiocsirt.org/vuln/euvd-2026-163189 EUVD-2026-163189 2026-10-23T23:34:42.432727+00:00 EUVD-2026-163189 https://cve.radiocsirt.org/vuln/fkie_cve-2023-44311 fkie_cve-2023-44311 2026-10-23T23:34:42.432742+00:00

Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class in Liferay Portal 7.4.3.41 through 7.4.3.89, and Liferay DXP 7.4 update 41 through update 89 allow remote attackers to inject arbitrary web script or HTML via the (1) code, or (2) error parameter. This issue is caused by an incomplete fix in CVE-2023-33941.

 https://cve.radiocsirt.org/vuln/ghsa-49gm-5685-8fxv GHSA-49gm-5685-8fxv — Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class 2026-10-23T23:34:42.432771+00:00

Affected: Maven: com.liferay:com.liferay.oauth2.provider.rest, Maven: com.liferay.portal:release.dxp.bom

Multiple reflected cross-site scripting (XSS) vulnerabilities in the Plugin for OAuth 2.0 module's OAuth2ProviderApplicationRedirect class before 4.0.51 from Liferay Portal (7.4.3.41 through 7.4.3.89), and Liferay DXP 7.4 update 41 through update 89 allow remote attackers to inject arbitrary web script or HTML via the (1) code, or (2) error parameter. This issue is caused by an incomplete fix in CVE-2023-33941.

 https://cve.radiocsirt.org/vuln/gsd-2023-44311 gsd-2023-44311 2026-10-23T23:34:42.432798+00:00 gsd-2023-44311 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2670 WID-SEC-W-2023-2670 — Liferay Liferay Portal: Mehrere Schwachstellen ermöglichen Cross-Site Scripting 2026-10-23T23:34:42.432810+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen.