Lucene search
PRIOn knowledge basePRION:CVE-2024-25144HistoryFeb 08, 2024 - 4:15 a.m.
Design/Logic Flaw
2024-02-0804:15:00
PRIOn knowledge base
www.prio-n.com
6
iframe
liferay portal
dos
logic flaw
security vulnerability
The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dxp | eq | 7.2 fixpack2 | |
| dxp | eq | 7.2 fixpack3 | |
| dxp | eq | 7.2 fixpack4 | |
| dxp | eq | 7.2 fixpack5 | |
| dxp | eq | 7.2 fixpack1 | |
| dxp | eq | 7.2 | |
| dxp | eq | 7.2 fixpack6 | |
| dxp | eq | 7.2 fixpack7 | |
| dxp | eq | 7.2 fixpack8 | |
| dxp | eq | 7.2 fixpack9 |
Related
cve
cve
CVE-2024-25144
2024-02-08 04:15:07
cvelist
cvelist
CVE-2024-25144
2024-02-08 03:25:31
nvd
nvd
CVE-2024-25144
2024-02-08 04:15:07
osv
osv
Liferay Portal denial-of-service vulnerability
2024-02-08 06:30:23
CVE-2024-25144
2024-02-08 04:15:07
veracode
veracode
Denial Of Service (DoS)
2024-02-09 07:08:17
github
github
Liferay Portal denial-of-service vulnerability
2024-02-08 06:30:23