Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 12:38:19 +0000 certfr-2022-avi-397 — De multiples vulnérabilités ont été découvertes dans Liferay Portal. Elles permettent à un attaquant de provoquer un co… https://cve.radiocsirt.org/vuln/certfr-2022-avi-397 certfr-2022-avi-397 https://cve.radiocsirt.org/vuln/certfr-2022-avi-397 EUVD-2026-334503 https://cve.radiocsirt.org/vuln/euvd-2026-334503 EUVD-2026-334503 https://cve.radiocsirt.org/vuln/euvd-2026-334503 fkie_cve-2022-26595 https://cve.radiocsirt.org/vuln/fkie_cve-2022-26595 <p>Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user&#39;s site membership assignment UI.</p> <p>Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user&#39;s site membership assignment UI.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-26595 GHSA-822f-jfpg-hg7h — Liferay Portal and Liferay DXP fails to check permissions to view sites/groups https://cve.radiocsirt.org/vuln/ghsa-822f-jfpg-hg7h <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.site.browser.web, Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user&#39;s site membership assignment UI.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom, Maven: com.liferay:com.liferay.site.browser.web, Maven: com.liferay.portal:com.liferay.portal.impl</p> <p>Liferay Portal 7.3.7, 7.4.0, and 7.4.1, and Liferay DXP 7.2 fix pack 13, and 7.3 fix pack 2 does not properly check user permission when accessing a list of sites/groups, which allows remote authenticated users to view sites/groups via the user&#39;s site membership assignment UI.</p> https://cve.radiocsirt.org/vuln/ghsa-822f-jfpg-hg7h gsd-2022-26595 https://cve.radiocsirt.org/vuln/gsd-2022-26595 gsd-2022-26595 https://cve.radiocsirt.org/vuln/gsd-2022-26595