https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:20:51 +0000 https://cve.radiocsirt.org/vuln/cve-2024-26270 <p><strong>Affected:</strong> Liferay Portal, Liferay DXP</p> <p>The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 embeds the user’s hashed password in the page’s HTML source, which allows man-in-the-middle attackers to steal a user&#39;s hashed password.</p> <p><strong>Affected:</strong> Liferay Portal, Liferay DXP</p> <p>The Account Settings page in Liferay Portal 7.4.3.76 through 7.4.3.99, and Liferay DXP 2023.Q3 before patch 5, and 7.4 update 76 through 92 embeds the user’s hashed password in the page’s HTML source, which allows man-in-the-middle attackers to steal a user&#39;s hashed password.</p> https://cve.radiocsirt.org/vuln/cve-2024-26270