https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 27 Oct 2026 12:28:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-334686 EUVD-2026-334686 https://cve.radiocsirt.org/vuln/euvd-2026-334686 https://cve.radiocsirt.org/vuln/fkie_cve-2022-42123 <p>A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.</p> <p>A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-42123 https://cve.radiocsirt.org/vuln/ghsa-hffx-r282-w2g9 <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>A Zip slip vulnerability in the Elasticsearch Connector in Liferay Portal 7.3.3 through 7.4.3.18, and Liferay DXP 7.3 before update 6, and 7.4 before update 19 allows attackers to create or overwrite existing files on the filesystem via the installation of a malicious Elasticsearch Sidecar plugin.</p> https://cve.radiocsirt.org/vuln/ghsa-hffx-r282-w2g9 https://cve.radiocsirt.org/vuln/gsd-2022-42123 gsd-2022-42123 https://cve.radiocsirt.org/vuln/gsd-2022-42123