Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 21:52:16 +0000 certfr-2025-avi-0672 — De multiples vulnérabilités ont été découvertes dans Liferay. Elles permettent à un attaquant de provoquer une falsific… https://cve.radiocsirt.org/vuln/certfr-2025-avi-0672 certfr-2025-avi-0672 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0672 EUVD-2026-249427 https://cve.radiocsirt.org/vuln/euvd-2026-249427 EUVD-2026-249427 https://cve.radiocsirt.org/vuln/euvd-2026-249427 fkie_cve-2025-4655 https://cve.radiocsirt.org/vuln/fkie_cve-2025-4655 <p>SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.</p> <p>SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-4655 GHSA-c6g5-g6r7-q4j6 — Liferay Portal and Liferay DXP vulnerable to Server-Side Request Forgery https://cve.radiocsirt.org/vuln/ghsa-c6g5-g6r7-q4j6 <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>An SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.</p> <p><strong>Affected:</strong> Maven: com.liferay.portal:release.portal.bom, Maven: com.liferay.portal:release.dxp.bom</p> <p>An SSRF vulnerability in FreeMarker templates in Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.5, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, and 7.4 GA through update 92 allows template editors to bypass access validations via crafted URLs.</p> https://cve.radiocsirt.org/vuln/ghsa-c6g5-g6r7-q4j6 WID-SEC-W-2025-1752 — Liferay Portal und DXP: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1752 <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um eine Cross-Site-Scripting- Angriff durchzuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Liferay Portal und Liferay DXP ausnutzen, um eine Cross-Site-Scripting- Angriff durchzuführen, vertrauliche Informationen offenzulegen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1752