Lucene search
+L

1 matches found

OSV
OSV
added 2025/10/13 9:31 p.m.6 views

GHSA-3CM9-JRF5-H2CX Liferay Account Admin Web vulnerable to Authorization Bypass Through User-Controlled Key

Insecure Direct Object Reference IDOR vulnerability with account addresses in Liferay Portal 7.4.3.4 through 7.4.3.111, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, and 7.4 GA through update 92 allows remote authenticated users to from one account to view addresses fr...

5.3CVSS6.8AI score0.00282EPSS
SaveExploits0References6
Rows per page
Query Builder