Security advisories

medium2024-02-20

CVE-2024-25608-Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character

liferay/liferay-portal · GHSA-548x-j6x6-hcv4

high2024-02-20

CVE-2024-25607-Liferay Portal defaults to a low work factor for the default password hashing algorithm

liferay/liferay-portal · GHSA-43h9-p3j4-39hm

medium2024-02-20

CVE-2024-25609-Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes

liferay/liferay-portal · GHSA-3qq5-wcrx-4h8r

high2024-02-20

CVE-2023-49250-Improper Certificate Validation in Apache DolphinScheduler

apache/dolphinscheduler · GHSA-37gx-jqx9-fwmg

critical2024-02-20

CVE-2023-49109-Remote Code Execution in Apache Dolphinscheduler

apache/dolphinscheduler · GHSA-qwxx-xww6-8q8m

medium2024-02-20

CVE-2024-25604-Liferay Portal and Liferay DXP Allows Authenticated Users with View Permissions to Edit Permissions

liferay/liferay-portal · GHSA-pw7p-3648-qqmg

medium2024-02-20

CVE-2024-25605-Liferay Portal and Liferay DXP Allows Templates to be Viewed via the UI or API

liferay/liferay-portal · GHSA-mf8h-grfg-j9j3

high2024-02-20

CVE-2024-25606-Liferay Portal has an XXE vulnerability in Java2WsddTask._format

liferay/liferay-portal · GHSA-869h-qhfx-w939

medium2024-02-20

CVE-2024-25149-Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options

liferay/liferay-portal · GHSA-qpgh-6v9w-vfv6

medium2024-02-20

CVE-2024-25150-Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel

liferay/liferay-portal · GHSA-4585-28v2-8h46

high2024-02-20

CVE-2024-22234-Broken Access Control in Spring Security With Direct Use of isFullyAuthenticated

spring-projects/spring-security · GHSA-w3w6-26f2-p474

medium2024-02-20

CVE-2023-44308-Liferay Vulnerable to Open Redirect via Adaptive Media Administration Page

liferay/liferay-portal · GHSA-3mrr-cw9q-727m

medium2024-02-20

CVE-2022-45320-Privilege escalation in Liferay Portal

liferay/liferay-portal · GHSA-mc8m-4r3w-q2hw

medium2024-02-20

CVE-2023-5190-Liferay Portal and Liferay DXP Vulnerable to Open Redirect in Countries Management's Edit Region Page

liferay/liferay-portal · GHSA-f3rf-cr7f-cwc4

critical2024-02-20

CVE-2024-1651-Deserialization of Untrusted Data in Torrentpier

torrentpier/torrentpier · GHSA-5rwm-2xw8-hh9p

high2024-02-20

CVE-2024-1635-Undertow Uncontrolled Resource Consumption Vulnerability

undertow-io/undertow · GHSA-w6qf-42m7-vh68

medium2024-02-19

CVE-2024-25981-Improper Access Control in moodle

moodle/moodle · GHSA-jfrg-9hpq-9hvp

medium2024-02-19

CVE-2024-25980-Improper Access Control in moodle

moodle/moodle · GHSA-cp8m-h777-g4p3

medium2024-02-19

CVE-2024-25983-Authorization Bypass in moodle

moodle/moodle · GHSA-9r26-5w88-qhp9

high2024-02-19

CVE-2024-25982-Cross-Site Request Forgery in moodle

moodle/moodle · GHSA-7pjp-fm93-p6pj