https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:08:49.451146+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-02T11:08:49.483914+00:00 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/euvd-2026-256993 EUVD-2026-256993 2026-10-02T11:08:49.483954+00:00 EUVD-2026-256993 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62261 fkie_cve-2025-62261 2026-10-02T11:08:49.483969+00:00

Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.

 https://cve.radiocsirt.org/vuln/ghsa-xcj6-xpjg-c4xr GHSA-xcj6-xpjg-c4xr — Liferay Portal Stores Password Reset Tokens in Plain Text 2026-10-02T11:08:49.484000+00:00

Affected: Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:com.liferay.portal.impl

Liferay Portal 7.4.0 through 7.4.3.99, and older unsupported versions, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 34, and older unsupported versions stores password reset tokens in plain text, which allows attackers with access to the database to obtain the token, reset a user’s password and take over the user’s account.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen 2026-10-02T11:08:49.484027+00:00

Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.