GHSA-PFXJ-GVQG-MJ44 Liferay Profile Widget does not prevent vCard extension spoofing

The Profile Widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows...

EUVD-2015-5454

Malware in sbrugna...

EUVD-2021-25584

Malware in sbrugna...

EUVD-2019-10766

Malware in sbrugna...

EUVD-2012-1419

Malware in sbrugna...

EUVD-2018-8087

Malware in sbrugna...

EUVD-2013-1750

Malware in sbrugna...

EUVD-2016-4139

Malware in sbrugna...

EUVD-2012-4170

Malware in sbrugna...

EUVD-2012-2569

Malware in sbrugna...

EUVD-2017-3349

Malware in sbrugna...

EUVD-2021-11118

Malware in sbrugna...

EUVD-2017-9649

Malware in sbrugna...

EUVD-2020-7786

Malware in sbrugna...

EUVD-2020-5870

Malware in sbrugna...

EUVD-2012-1432

Malware in sbrugna...

EUVD-2021-11110

Malware in sbrugna...

EUVD-2016-9943

Malware in sbrugna...

EUVD-2016-1982

Malware in sbrugna...

EUVD-2014-3695

Malware in sbrugna...