https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:47:36.291517+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une atteinte… 2026-10-02T10:47:36.336403+00:00 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-256928 EUVD-2026-256928 2026-10-02T10:47:36.336440+00:00 EUVD-2026-256928 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62253 fkie_cve-2025-62253 2026-10-02T10:47:36.336455+00:00

Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter.

 https://cve.radiocsirt.org/vuln/ghsa-2pwh-9q9q-5r9c GHSA-2pwh-9q9q-5r9c — Liferay Portal Vulnerable to Open Redirect via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect par… 2026-10-02T10:47:36.336484+00:00

Affected: Maven: com.liferay:com.liferay.layout.admin.web

Open redirect vulnerability in page administration in Liferay Portal 7.4.0 through 7.4.3.97, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_redirect parameter.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-02T10:47:36.336508+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.