Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 10:53:17 +0000 EUVD-2026-334635 https://cve.radiocsirt.org/vuln/euvd-2026-334635 EUVD-2026-334635 https://cve.radiocsirt.org/vuln/euvd-2026-334635 fkie_cve-2022-38512 https://cve.radiocsirt.org/vuln/fkie_cve-2022-38512 <p>The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page&#39;s XLIFF translation file via crafted URL.</p> <p>The Translation module in Liferay Portal v7.4.3.12 through v7.4.3.36, and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page&#39;s XLIFF translation file via crafted URL.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-38512 GHSA-h9ww-wjg4-jvvg — Liferay Portal and Liferay DXP Fails to Check Permissions in Translation Module https://cve.radiocsirt.org/vuln/ghsa-h9ww-wjg4-jvvg <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>The Translation module before v2.0.58 from Liferay Portal (v7.4.3.12 through v7.4.3.36), and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page&#39;s XLIFF translation file via crafted URL.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.translation.web, Maven: com.liferay.portal:release.dxp.bom</p> <p>The Translation module before v2.0.58 from Liferay Portal (v7.4.3.12 through v7.4.3.36), and Liferay DXP 7.4 update 8 through 36 does not check permissions before allowing a user to export a web content for translation, allowing attackers to download a web content page&#39;s XLIFF translation file via crafted URL.</p> https://cve.radiocsirt.org/vuln/ghsa-h9ww-wjg4-jvvg gsd-2022-38512 https://cve.radiocsirt.org/vuln/gsd-2022-38512 gsd-2022-38512 https://cve.radiocsirt.org/vuln/gsd-2022-38512