https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T20:21:49.372722+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-33946 CVE-2023-33946 2026-10-23T20:21:49.387658+00:00

Affected: Liferay Portal, Liferay DXP

The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instances, which allows remote authenticated users in one virtual instance to view objects in a different virtual instance via OAuth 2 scope administration page.