https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 16:25:56 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0811 certfr-2025-avi-0811 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0811 https://cve.radiocsirt.org/vuln/euvd-2026-253304 EUVD-2026-253304 https://cve.radiocsirt.org/vuln/euvd-2026-253304 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43806 <p>Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via the REST APIs.</p> <p>Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via the REST APIs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43806 https://cve.radiocsirt.org/vuln/ghsa-pm45-xx4q-fmv7 <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.headless.batch.engine.impl, Maven: com.liferay:com.liferay.batch.engine.service</p> <p>Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via the REST APIs.</p> <p><strong>Affected:</strong> Maven: com.liferay:com.liferay.headless.batch.engine.impl, Maven: com.liferay:com.liferay.batch.engine.service</p> <p>Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 does not properly check permission with import and export tasks, which allows remote authenticated users to access the exported data via the REST APIs.</p> https://cve.radiocsirt.org/vuln/ghsa-pm45-xx4q-fmv7 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2106 <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen und Daten zu manipulieren.</p> <p>Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um Informationen offenzulegen, Cross-Site-Scripting-Angriffe durchzuführen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2106