Количество 2
Количество 2
CVE-2025-62245
4 месяца назад
Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments.
CVSS3: 4.3
EPSS: Низкий
GHSA-9676-rh83-cr86
4 месяца назад
Liferay Portal is vulnerable to CSRF through publication comments
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2025-62245 Cross-site request forgery (CSRF) vulnerability in Liferay Portal 7.4.1 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to add and edit publication comments. | CVSS3: 4.3 | 0% Низкий | 4 месяца назад | |
GHSA-9676-rh83-cr86 Liferay Portal is vulnerable to CSRF through publication comments | 0% Низкий | 4 месяца назад |
Уязвимостей на страницу
20