<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <id>https://cve.radiocsirt.org/rss/recent/all/10</id>
  <title>Most recent entries from all</title>
  <updated>2026-10-03T14:02:37.151767+00:00</updated>
  <author>
    <name>Vulnerability-Lookup</name>
    <email>csirt@opendfir.org</email>
  </author>
  <link href="https://cve.radiocsirt.org" rel="alternate"/>
  <generator uri="https://lkiesow.github.io/python-feedgen" version="1.0.0">python-feedgen</generator>
  <subtitle>Contains only the most 10 recent entries.</subtitle>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954</id>
    <title>certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte…</title>
    <updated>2026-10-03T14:02:37.219777+00:00</updated>
    <content>certfr-2025-avi-0954</content>
    <link href="https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/euvd-2026-7428</id>
    <title>EUVD-2026-7428</title>
    <updated>2026-10-03T14:02:37.219819+00:00</updated>
    <content>EUVD-2026-7428</content>
    <link href="https://cve.radiocsirt.org/vuln/euvd-2026-7428"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/fkie_cve-2023-5190</id>
    <title>fkie_cve-2023-5190</title>
    <updated>2026-10-03T14:02:37.219835+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect parameter.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/fkie_cve-2023-5190"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/ghsa-f3rf-cr7f-cwc4</id>
    <title>GHSA-f3rf-cr7f-cwc4 — Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page</title>
    <updated>2026-10-03T14:02:37.219869+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml"><p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p>
<p>Open redirect vulnerability in the Countries Management’s edit region page in Liferay Portal 7.4.3.45 through 7.4.3.101, and Liferay DXP 2023.Q3 before patch 6, and 7.4 update 45 through 92 allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_address_web_internal_portlet_CountriesManagementAdminPortlet_redirect parameter.</p></div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/ghsa-f3rf-cr7f-cwc4"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/gsd-2023-5190</id>
    <title>gsd-2023-5190</title>
    <updated>2026-10-03T14:02:37.219923+00:00</updated>
    <content>gsd-2023-5190</content>
    <link href="https://cve.radiocsirt.org/vuln/gsd-2023-5190"/>
  </entry>
  <entry>
    <id>https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428</id>
    <title>WID-SEC-W-2024-0428 — Liferay Portal und DXP: Mehrere Schwachstellen</title>
    <updated>2026-10-03T14:02:37.219947+00:00</updated>
    <content type="xhtml">
      <div xmlns="http://www.w3.org/1999/xhtml">
        <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p>
      </div>
    </content>
    <link href="https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428"/>
  </entry>
</feed>
