Most recent entries from all

certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte…

2026-10-04T03:41:21.795578+00:00

certfr-2025-avi-0954

EUVD-2026-252528

2026-10-04T03:41:21.795613+00:00

EUVD-2026-252528

fkie_cve-2025-43790

2026-10-04T03:41:21.795628+00:00

Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to access, create, edit, relate data/object entries/definitions to an object in a different virtual instance.

GHSA-5wxc-3jfw-w94p — Liferay Portal is vulnerable to Insecure Direct Object Reference (IDOR) attack through Authentication Bypass

2026-10-04T03:41:21.795656+00:00

Affected: Maven: com.liferay:com.liferay.object.service

An Insecure Direct Object Reference (IDOR) vulnerability in Liferay Portal 7.4.0 through 7.4.3.124, and Liferay DXP 2024.Q2.0 through 2024.Q2.6, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update 92 allows remote authenticated users to from one virtual instance to access, create, edit, relate data/object entries/definitions to an object in a different virtual instance.

WID-SEC-W-2025-2041 — Liferay Portal: Mehrere Schwachstellen

2026-10-04T03:41:21.795680+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um einen Cross-Site Scripting Angriff durchzuführen, und um Informationen offenzulegen.