https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T05:10:26.613518+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0140 certfr-2024-avi-0140 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer un déni de s… 2026-10-07T05:10:26.617152+00:00 certfr-2024-avi-0140 https://cve.radiocsirt.org/vuln/euvd-2026-190950 EUVD-2026-190950 2026-10-07T05:10:26.617189+00:00 EUVD-2026-190950 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25148 fkie_cve-2024-25148 2026-10-07T05:10:26.617205+00:00

In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter may get leaked when creating linked content using the WYSIWYG editor and while impersonating a user. This may allow remote authenticated users to impersonate a user after accessing the linked content.

 https://cve.radiocsirt.org/vuln/ghsa-qwj8-qgpr-8crm GHSA-qwj8-qgpr-8crm — Liferay Portal vulnerable to user impersonation 2026-10-07T05:10:26.617234+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

In Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions the `doAsUserId` URL parameter may get leaked when creating linked content using the WYSIWYG editor and while impersonating a user. This may allow remote authenticated users to impersonate a user after accessing the linked content.

 https://cve.radiocsirt.org/vuln/gsd-2024-25148 gsd-2024-25148 2026-10-07T05:10:26.617259+00:00 gsd-2024-25148 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0323 WID-SEC-W-2024-0323 — Liferay Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-07T05:10:26.617272+00:00

Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay Portal und Liferay Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting (XSS)-Angriffe durchzuführen, Sicherheitsmaßnahmen zu umgehen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.