https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T21:52:20.579034+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0672 certfr-2025-avi-0672 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une falsific… 2026-10-20T21:52:20.582852+00:00 certfr-2025-avi-0672 https://cve.radiocsirt.org/vuln/euvd-2026-249427 EUVD-2026-249427 2026-10-20T21:52:20.582921+00:00 EUVD-2026-249427 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4655 fkie_cve-2025-4655 2026-10-20T21:52:20.582938+00:00

SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.

 https://cve.radiocsirt.org/vuln/ghsa-c6g5-g6r7-q4j6 GHSA-c6g5-g6r7-q4j6 — Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery 2026-10-20T21:52:20.582967+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom

An SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1752 WID-SEC-W-2025-1752 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-20T21:52:20.582995+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um eine Cross-Site-Scripting- Angriff durchzuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.