Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 01:57:22 +0000 cnvd-2021-62966 https://cve.radiocsirt.org/vuln/cnvd-2021-62966 cnvd-2021-62966 https://cve.radiocsirt.org/vuln/cnvd-2021-62966 EUVD-2026-28348 https://cve.radiocsirt.org/vuln/euvd-2026-28348 EUVD-2026-28348 https://cve.radiocsirt.org/vuln/euvd-2026-28348 fkie_cve-2021-33321 https://cve.radiocsirt.org/vuln/fkie_cve-2021-33321 <p>Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.</p> <p>Insecure default configuration in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-33321 GHSA-jfch-m2x3-2v66 — Liferay Portal and Liferay DXP insecure default configuration https://cve.radiocsirt.org/vuln/ghsa-jfch-m2x3-2v66 <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl, Maven: com.liferay.portal:release.portal.bom</p> <p>Insecure default configuration in portal services implementation before 5.11.0 in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:com.liferay.portal.impl, Maven: com.liferay.portal:release.portal.bom</p> <p>Insecure default configuration in portal services implementation before 5.11.0 in Liferay Portal 6.2.3 through 7.3.2, and Liferay DXP before 7.3, allows remote attackers to enumerate user email address via the forgot password functionality. The portal.property login.secure.forgot.password should be defaulted to true.</p> https://cve.radiocsirt.org/vuln/ghsa-jfch-m2x3-2v66 gsd-2021-33321 https://cve.radiocsirt.org/vuln/gsd-2021-33321 gsd-2021-33321 https://cve.radiocsirt.org/vuln/gsd-2021-33321