Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page

Cross-Site Request Forgery CSRF vulnerability in the terms of use page in the implementation for the portal services package before 5.25.0 from Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use...

PT-2024-10916 · Liferay · Liferay Dxp +1

Name of the Vulnerable Software and Affected Versions: Liferay Portal versions prior to 7.3.6 Liferay DXP 7.3 before service pack 1 Liferay DXP 7.2 before fix pack 11 Description: A Cross-Site Request Forgery CSRF issue exists in the terms of use page, allowing remote attackers to accept the site...

Liferay Portal and Liferay DXP Security Vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay Inc.Liferay Portal is a J2EE-based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP ...