GHSA-PFXJ-GVQG-MJ44 Liferay Profile Widget does not prevent vCard extension spoofing

The Profile Widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...

EUVD-2016-2248

Malware in sbrugna...

EUVD-2014-3079

Malware in sbrugna...

EUVD-2013-2245

Malware in sbrugna...

EUVD-2013-5593

Malware in sbrugna...

EUVD-2013-2168

Malware in sbrugna...

EUVD-2020-3989

Malware in sbrugna...

EUVD-2014-0473

Malware in sbrugna...

EUVD-2011-3489

Malware in sbrugna...

EUVD-2010-2141

Malware in sbrugna...

EUVD-2006-0804

Malware in sbrugna...

EUVD-2014-6504

Malware in sbrugna...

EUVD-2012-1010

Malware in sbrugna...

EUVD-2005-4751

Malware in sbrugna...

EUVD-2006-5773

Malware in sbrugna...

EUVD-2012-1684

Malware in sbrugna...

EUVD-2008-6970

Malware in sbrugna...

EUVD-2014-1756

Malware in sbrugna...

EUVD-2010-2017

Malware in sbrugna...

EUVD-2009-3206

Malware in sbrugna...