Liferay Portal CE 7.4.3.70 < x < 7.4.3.77 Multiple vulnerabilities

The detected install of Liferay Portal CE is between 7.4.3.70 and 7.4.3.76. It is therefore affected by multiple vulnerabilities: - Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76 allows remote attackers to execute...

CVE-2023-35030

Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the...

CVE-2023-35030

Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the...

CVE-2023-35030

Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the...

CVE-2023-35030

Cross-site request forgery CSRF vulnerability in the Layout module's SEO configuration in Liferay Portal 7.4.3.70 through 7.4.3.76, and Liferay DXP 7.4 update 70 through 76 allows remote attackers to execute arbitrary code in the scripting console via the...

CVE-2023-35030

The CVE-2023-35030 issue affects Liferay Portal 7.4.3.70–7.4.3.76 and Liferay DXP 7.4 update 70–76, where a CSRF vulnerability in the Layout module's SEO configuration enables an attacker to trigger the scripting console via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURL para...