https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T16:14:30.828938+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-62974 cnvd-2021-62974 2026-10-15T16:14:30.832411+00:00 cnvd-2021-62974 https://cve.radiocsirt.org/vuln/euvd-2026-28400 EUVD-2026-28400 2026-10-15T16:14:30.832443+00:00 EUVD-2026-28400 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33324 fkie_cve-2021-33324 2026-10-15T16:14:30.832458+00:00

The Layout module in Liferay Portal 7.1.0 through 7.3.1, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 5, does not properly check permission of pages, which allows remote authenticated users without view permission of a page to view the page via a site's page administration.

 https://cve.radiocsirt.org/vuln/ghsa-474f-cmx5-gm69 GHSA-474f-cmx5-gm69 — Liferay Portal and Liferay DXP Don't Check Permissions of Pages 2026-10-15T16:14:30.832486+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

The Layout module in Liferay Portal 7.1.0 through 7.3.1, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 5, does not properly check permission of pages, which allows remote authenticated users without view permission of a page to view the page via a site's page administration.

 https://cve.radiocsirt.org/vuln/gsd-2021-33324 gsd-2021-33324 2026-10-15T16:14:30.832537+00:00 gsd-2021-33324