https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 13:44:33 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0954 https://cve.radiocsirt.org/vuln/euvd-2026-4235 EUVD-2026-4235 https://cve.radiocsirt.org/vuln/euvd-2026-4235 https://cve.radiocsirt.org/vuln/fkie_cve-2024-25608 <p>HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the &#39;REPLACEMENT CHARACTER&#39; (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) &#39;redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.</p> <p>HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the &#39;REPLACEMENT CHARACTER&#39; (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) &#39;redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-25608 https://cve.radiocsirt.org/vuln/ghsa-548x-j6x6-hcv4 <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the &#39;REPLACEMENT CHARACTER&#39; (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) &#39;redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>HtmlUtil.escapeRedirect in Liferay Portal 7.2.0 through 7.4.3.18, and older unsupported versions, and Liferay DXP 7.4 before update 19, 7.3 before update 4, 7.2 before fix pack 19, and older unsupported versions can be circumvented by using the &#39;REPLACEMENT CHARACTER&#39; (U+FFFD), which allows remote attackers to redirect users to arbitrary external URLs via the (1) &#39;redirect` parameter (2) `FORWARD_URL` parameter, (3) `noSuchEntryRedirect` parameter, and (4) others parameters that rely on HtmlUtil.escapeRedirect.</p> https://cve.radiocsirt.org/vuln/ghsa-548x-j6x6-hcv4 https://cve.radiocsirt.org/vuln/gsd-2024-25608 gsd-2024-25608 https://cve.radiocsirt.org/vuln/gsd-2024-25608 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428 <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p> <p>Ein entfernter Angreifer kann mehrere Schwachstellen in Liferay Liferay DXP und Liferay Liferay Portal ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Dateien zu manipulieren, vertrauliche Informationen offenzulegen oder seine Privilegien zu erweitern.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0428