https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:39:07.146817+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-06T20:39:07.212344+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-234935 EUVD-2026-234935 2026-10-06T20:39:07.212400+00:00 EUVD-2026-234935 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29050 fkie_cve-2021-29050 2026-10-06T20:39:07.212422+00:00

Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.

 https://cve.radiocsirt.org/vuln/ghsa-mh9r-9pcx-rx55 GHSA-mh9r-9pcx-rx55 — Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page 2026-10-06T20:39:07.212469+00:00

Affected: Maven: com.liferay.portal:com.liferay.portal.impl, Maven: com.liferay.portal:release.dxp.bom

Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in the implementation for the portal services package before 5.25.0 from Liferay Portal (before 7.3.6), and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.

 https://cve.radiocsirt.org/vuln/gsd-2021-29050 gsd-2021-29050 2026-10-06T20:39:07.212525+00:00 gsd-2021-29050 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 WID-SEC-W-2024-0323 — Liferay Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-06T20:39:07.212546+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.