CVE-2024-8980

🗓️ 22 Oct 2024 15:15:07Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 9 Views

The Script Console in Liferay Portal and DXP versions does not protect against CSRF attacks, enabling remote execution of arbitrary Groovy script

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2024-8980	22 Oct 202417:57	–	circl
CNNVD	Liferay Portal 跨站请求伪造漏洞	22 Oct 202400:00	–	cnnvd
CVE	CVE-2024-8980	22 Oct 202414:43	–	cve
Cvelist	CVE-2024-8980	22 Oct 202414:43	–	cvelist
EUVD	EUVD-2024-49520	3 Oct 202520:07	–	euvd
Github Security Blog	Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console	22 Oct 202418:32	–	github
Tenable Nessus	Liferay Portal 7.0.0 < 7.4.3.102 XSS	12 Dec 202400:00	–	nessus
OSV	CVE-2024-8980	22 Oct 202415:15	–	osv
OSV	GHSA-CHJ2-4VG7-HHG3 Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console	22 Oct 202418:32	–	osv
Positive Technologies	PT-2024-39349 · Liferay · Liferay Dxp +1	22 Oct 202400:00	–	ptsecurity

NVD

Node

liferay digital_experience_platformRange6.2–7.2

OR

liferay digital_experience_platformRange2023.q3.1–2023.q3.5

OR

liferay digital_experience_platformMatch7.3-

OR

liferay digital_experience_platformMatch7.3fix_pack_1

OR

liferay digital_experience_platformMatch7.3fix_pack_2

OR

liferay digital_experience_platformMatch7.3service_pack_1

OR

liferay digital_experience_platformMatch7.3service_pack_3

OR

liferay digital_experience_platformMatch7.3update10

OR

liferay digital_experience_platformMatch7.3update11

OR

liferay digital_experience_platformMatch7.3update12

OR

liferay digital_experience_platformMatch7.3update13

OR

liferay digital_experience_platformMatch7.3update14

OR

liferay digital_experience_platformMatch7.3update15

OR

liferay digital_experience_platformMatch7.3update16

OR

liferay digital_experience_platformMatch7.3update17

OR

liferay digital_experience_platformMatch7.3update18

OR

liferay digital_experience_platformMatch7.3update19

OR

liferay digital_experience_platformMatch7.3update20

OR

liferay digital_experience_platformMatch7.3update21

OR

liferay digital_experience_platformMatch7.3update22

OR

liferay digital_experience_platformMatch7.3update23

OR

liferay digital_experience_platformMatch7.3update24

OR

liferay digital_experience_platformMatch7.3update25

OR

liferay digital_experience_platformMatch7.3update26

OR

liferay digital_experience_platformMatch7.3update27

OR

liferay digital_experience_platformMatch7.3update28

OR

liferay digital_experience_platformMatch7.3update29

OR

liferay digital_experience_platformMatch7.3update30

OR

liferay digital_experience_platformMatch7.3update31

OR

liferay digital_experience_platformMatch7.3update32

OR

liferay digital_experience_platformMatch7.3update33

OR

liferay digital_experience_platformMatch7.3update34

OR

liferay digital_experience_platformMatch7.3update35

OR

liferay digital_experience_platformMatch7.3update4

OR

liferay digital_experience_platformMatch7.3update5

OR

liferay digital_experience_platformMatch7.3update6

OR

liferay digital_experience_platformMatch7.3update7

OR

liferay digital_experience_platformMatch7.3update8

OR

liferay digital_experience_platformMatch7.3update9

OR

liferay digital_experience_platformMatch7.4-

OR

liferay digital_experience_platformMatch7.4update1

OR

liferay digital_experience_platformMatch7.4update10

OR

liferay digital_experience_platformMatch7.4update11

OR

liferay digital_experience_platformMatch7.4update12

OR

liferay digital_experience_platformMatch7.4update13

OR

liferay digital_experience_platformMatch7.4update14

OR

liferay digital_experience_platformMatch7.4update15

OR

liferay digital_experience_platformMatch7.4update16

OR

liferay digital_experience_platformMatch7.4update17

OR

liferay digital_experience_platformMatch7.4update18

OR

liferay digital_experience_platformMatch7.4update19

OR

liferay digital_experience_platformMatch7.4update2

OR

liferay digital_experience_platformMatch7.4update20

OR

liferay digital_experience_platformMatch7.4update21

OR

liferay digital_experience_platformMatch7.4update22

OR

liferay digital_experience_platformMatch7.4update23

OR

liferay digital_experience_platformMatch7.4update24

OR

liferay digital_experience_platformMatch7.4update25

OR

liferay digital_experience_platformMatch7.4update26

OR

liferay digital_experience_platformMatch7.4update27

OR

liferay digital_experience_platformMatch7.4update28

OR

liferay digital_experience_platformMatch7.4update29

OR

liferay digital_experience_platformMatch7.4update3

OR

liferay digital_experience_platformMatch7.4update30

OR

liferay digital_experience_platformMatch7.4update31

OR

liferay digital_experience_platformMatch7.4update32

OR

liferay digital_experience_platformMatch7.4update33

OR

liferay digital_experience_platformMatch7.4update34

OR

liferay digital_experience_platformMatch7.4update35

OR

liferay digital_experience_platformMatch7.4update36

OR

liferay digital_experience_platformMatch7.4update37

OR

liferay digital_experience_platformMatch7.4update38

OR

liferay digital_experience_platformMatch7.4update39

OR

liferay digital_experience_platformMatch7.4update4

OR

liferay digital_experience_platformMatch7.4update40

OR

liferay digital_experience_platformMatch7.4update41

OR

liferay digital_experience_platformMatch7.4update42

OR

liferay digital_experience_platformMatch7.4update43

OR

liferay digital_experience_platformMatch7.4update44

OR

liferay digital_experience_platformMatch7.4update45

OR

liferay digital_experience_platformMatch7.4update46

OR

liferay digital_experience_platformMatch7.4update47

OR

liferay digital_experience_platformMatch7.4update48

OR

liferay digital_experience_platformMatch7.4update49

OR

liferay digital_experience_platformMatch7.4update5

OR

liferay digital_experience_platformMatch7.4update50

OR

liferay digital_experience_platformMatch7.4update51

OR

liferay digital_experience_platformMatch7.4update52

OR

liferay digital_experience_platformMatch7.4update53

OR

liferay digital_experience_platformMatch7.4update54

OR

liferay digital_experience_platformMatch7.4update55

OR

liferay digital_experience_platformMatch7.4update56

OR

liferay digital_experience_platformMatch7.4update57

OR

liferay digital_experience_platformMatch7.4update58

OR

liferay digital_experience_platformMatch7.4update59

OR

liferay digital_experience_platformMatch7.4update6

OR

liferay digital_experience_platformMatch7.4update60

OR

liferay digital_experience_platformMatch7.4update61

OR

liferay digital_experience_platformMatch7.4update62

OR

liferay digital_experience_platformMatch7.4update63

OR

liferay digital_experience_platformMatch7.4update64

OR

liferay digital_experience_platformMatch7.4update65

OR

liferay digital_experience_platformMatch7.4update66

OR

liferay digital_experience_platformMatch7.4update67

OR

liferay digital_experience_platformMatch7.4update68

OR

liferay digital_experience_platformMatch7.4update69

OR

liferay digital_experience_platformMatch7.4update7

OR

liferay digital_experience_platformMatch7.4update70

OR

liferay digital_experience_platformMatch7.4update71

OR

liferay digital_experience_platformMatch7.4update72

OR

liferay digital_experience_platformMatch7.4update73

OR

liferay digital_experience_platformMatch7.4update74

OR

liferay digital_experience_platformMatch7.4update75

OR

liferay digital_experience_platformMatch7.4update76

OR

liferay digital_experience_platformMatch7.4update77

OR

liferay digital_experience_platformMatch7.4update78

OR

liferay digital_experience_platformMatch7.4update79

OR

liferay digital_experience_platformMatch7.4update8

OR

liferay digital_experience_platformMatch7.4update80

OR

liferay digital_experience_platformMatch7.4update81

OR

liferay digital_experience_platformMatch7.4update82

OR

liferay digital_experience_platformMatch7.4update83

OR

liferay digital_experience_platformMatch7.4update84

OR

liferay digital_experience_platformMatch7.4update85

OR

liferay digital_experience_platformMatch7.4update86

OR

liferay digital_experience_platformMatch7.4update87

OR

liferay digital_experience_platformMatch7.4update88

OR

liferay digital_experience_platformMatch7.4update89

OR

liferay digital_experience_platformMatch7.4update9

OR

liferay digital_experience_platformMatch7.4update90

OR

liferay digital_experience_platformMatch7.4update91

OR

liferay digital_experience_platformMatch7.4update92

OR

liferay liferay_portalRange7.0.0–7.0.6

OR

liferay liferay_portalRange7.1.0–7.1.3

OR

liferay liferay_portalRange7.2.0–7.2.1

OR

liferay liferay_portalRange7.3.0–7.3.7

OR

liferay liferay_portalRange7.4.0–7.4.3.102

Source	Link
liferay	www.liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2024-8980

10 Dec 2024 21:07Current

CVSS 3.16.1 - 9.6

EPSS0.00381

liferay portal dxp csrf attacks remote execution groovy script xss vulnerability