https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T15:30:55.849237+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-33949 CVE-2023-33949 2026-10-14T15:30:55.864883+00:00

Affected: Liferay Portal, Liferay DXP

In Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.2 and earlier the default configuration does not require users to verify their email address, which allows remote attackers to create accounts using fake email addresses or email addresses which they don't control. The portal property `company.security.strangers.verify` should be set to true.