https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T17:45:51.430689+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-03T17:45:51.477500+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-250583 EUVD-2026-250583 2026-10-03T17:45:51.477543+00:00 EUVD-2026-250583 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43767 fkie_cve-2025-43767 2026-10-03T17:45:51.477558+00:00

Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker to exploit this security vulnerability to redirect users to a malicious site.

 https://cve.radiocsirt.org/vuln/ghsa-6hj4-v2qp-cqr2 GHSA-6hj4-v2qp-cqr2 — Liferay Portal allows open redirect in /c/portal/edit_info_item parameter redirect 2026-10-03T17:45:51.477589+00:00

Affected: Maven: com.liferay:com.liferay.info.impl

Open Redirect vulnerability in /c/portal/edit_info_item parameter redirect in Liferay Portal 7.4.3.86 through 7.4.3.131, and Liferay DXP 2024.Q3.1 through 2024.Q3.9, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 update 86 through update 92 allows an attacker to exploit this security vulnerability to redirect users to a malicious site.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1900 WID-SEC-W-2025-1900 — Liferay Portal: Mehrere Schwachstellen 2026-10-03T17:45:51.477614+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand zu verursachen, Benutzer auf bösartige Websites umzuleiten und Cross-Site-Scripting-Angriffe durchzuführen.