Liferay Portal CE 7.4.3.70 < x < 7.4.3.77 Multiple vulnerabilities

The detected install of Liferay Portal CE is between 7.4.3.70 and 7.4.3.76. It is therefore affected by multiple vulnerabilities: - Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76 allows remote attackers to execute...

CVE-2023-35029

Open redirect in Liferay Portal/DXP: affected Liferay Portal 7.4.3.70–7.4.3.76 and DXP 7.4 updates 70–76. The vulnerability exploits the Layout module’s SEO configuration via the GroupPagesPortlet_backURL parameter to redirect users to arbitrary external URLs. Exploitation details are not provide...