https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T22:00:49.824897+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-196768 EUVD-2026-196768 2026-10-12T22:00:49.828006+00:00 EUVD-2026-196768 https://cve.radiocsirt.org/vuln/fkie_cve-2023-33948 fkie_cve-2023-33948 2026-10-12T22:00:49.828049+00:00

The Dynamic Data Mapping module in Liferay Portal 7.4.3.67, and Liferay DXP 7.4 update 67 does not limit Document and Media files which can be downloaded from a Form, which allows remote attackers to download any file from Document and Media via a crafted URL.

 https://cve.radiocsirt.org/vuln/ghsa-w6f8-mxf5-4vf8 GHSA-w6f8-mxf5-4vf8 — Missing authorization in Liferay portal 2026-10-12T22:00:49.828100+00:00

Affected: Maven: com.liferay.portal:release.portal.bom

The Dynamic Data Mapping module in Liferay Portal 7.4.3.67, and Liferay DXP 7.4 update 67 does not limit Document and Media files which can be downloaded from a Form, which allows remote attackers to download any file from Document and Media via a crafted URL.

 https://cve.radiocsirt.org/vuln/gsd-2023-33948 gsd-2023-33948 2026-10-12T22:00:49.828148+00:00 gsd-2023-33948