Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
liferay_enterprise_portal Admin端口 跨站脚本攻击漏洞
Vulnerability Description
4.4.0版本以前的Liferay Portal的Admin端口中的跨站脚本攻击漏洞会允许远程授权用户通过关闭消息来实施未知行动。
CVSS Information
N/A
Vulnerability Type
N/A