Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 10:04:59 +0000 certfr-2025-avi-0932 — De multiples vulnérabilités ont été découvertes dans Liferay. Certaines d'entre elles permettent à un attaquant de prov… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 certfr-2025-avi-0932 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0932 EUVD-2026-257015 https://cve.radiocsirt.org/vuln/euvd-2026-257015 EUVD-2026-257015 https://cve.radiocsirt.org/vuln/euvd-2026-257015 fkie_cve-2025-62258 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62258 <p>CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.</p> <p>CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62258 GHSA-gh4w-8qgq-8w9r — Liferay Portal Vulnerable to CSRF in Headless APIs https://cve.radiocsirt.org/vuln/ghsa-gh4w-8qgq-8w9r <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom</p> <p>CSRF vulnerability in Headless API in Liferay Portal 7.4.0 through 7.4.3.107, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to execute any Headless API via the `endpoint` parameter.</p> https://cve.radiocsirt.org/vuln/ghsa-gh4w-8qgq-8w9r WID-SEC-W-2025-2419 — Liferay Portal und DXP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419 <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Liferay DXP und Liferay Portal ausnutzen, um falsche Informationen darzustellen, Informationen offenzulegen, Code auszuführen, ein Cross-Site-Scripting auszuführen oder einen Denial of Service herbeizuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2419