https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T22:54:43.820028+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0810 certfr-2025-avi-0810 — Une vulnérabilité a été découverte dans Liferay. Elle permet à un attaquant de provoquer une injection de requêtes illé… 2026-10-05T22:54:43.823458+00:00 certfr-2025-avi-0810 https://cve.radiocsirt.org/vuln/euvd-2026-253153 EUVD-2026-253153 2026-10-05T22:54:43.823509+00:00 EUVD-2026-253153 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43809 fkie_cve-2025-43809 2026-10-05T22:54:43.823524+00:00

Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the 'orderUuid' parameter.

 https://cve.radiocsirt.org/vuln/ghsa-697h-3q6m-jwp4 GHSA-697h-3q6m-jwp4 — Liferay Portal Cross-Site Request Forgery (CSRF) vulnerability 2026-10-05T22:54:43.823554+00:00

Affected: Maven: com.liferay.portal:com.liferay.portal.impl

Cross-Site Request Forgery (CSRF) vulnerability in the server (license) registration page in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.9, 7.4 GA through update 92, and older unsupported versions allows remote attackers to register a server license via the 'orderUuid' parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2095 WID-SEC-W-2025-2095 — Liferay Portal: Mehrere Schwachstellen 2026-10-05T22:54:43.823579+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.