Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-83qx-288m-72w4: Liferay Portal Missing Authorization vulnerability

The Layout module in Liferay Portal v7.3.3 through v7.4.3.34, and Liferay DXP 7.3 before update 10, and 7.4 before update 35 does not check user permission before showing the preview of a “Content Page” type page, allowing attackers to view unpublished “Content Page” pages via URL manipulation.

ghsa
#vulnerability#git#auth

Liferay Portal Missing Authorization vulnerability

Moderate severity GitHub Reviewed Published Sep 23, 2022 • Updated Sep 23, 2022

ghsa: Latest News

GHSA-62r2-gcxr-426x: starcitizentools/citizen-skin vulnerable to stored, self-XSS in the "real name" field