Cross-site Request Forgery (CSRF)

Overview com.liferay:com.liferay.layout.admin.web is a portal for Liferay. Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF through the pauth parameter. An attacker can intercept the CSRF token and perform unauthorized actions on behalf of the user by manipulati...