https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T22:54:37.926297+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-334693 EUVD-2026-334693 2026-10-14T22:54:37.929130+00:00 EUVD-2026-334693 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42130 fkie_cve-2022-42130 2026-10-14T22:54:37.929161+00:00

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 19, 7.3 before update 4, and 7.4 GA does not properly check permission of form entries, which allows remote authenticated users to view and access all form entries.

 https://cve.radiocsirt.org/vuln/ghsa-mxvq-cv4x-p3jw GHSA-mxvq-cv4x-p3jw — Incorrect Default Permissions in Liferay Portal 2026-10-14T22:54:37.929190+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 19, 7.3 before update 4, and 7.4 GA does not properly check permission of form entries, which allows remote authenticated users to view and access all form entries.

 https://cve.radiocsirt.org/vuln/gsd-2022-42130 gsd-2022-42130 2026-10-14T22:54:37.929214+00:00 gsd-2022-42130