CVE-2024-25146

creationtimestamp| type| source ---|---|--- 2024-02-08 05:31:39+00:00| seen| https://t.me/ctinow/181162...

CVE-2024-25146

CVE-2024-25146 affects Liferay Portal 7.2.0–7.4.1 and older unsupported versions, and Liferay DXP 7.3 before SP3, and 7.2 before FP18. The issue arises when locale.prepend.friendly.url.style=2 is set and a custom 404 page is used, causing the app to return different responses based on whether a s...