Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Liferay Portal 7.2.0 through 7.3.2, and Liferay DXP 7.2 before fix pack 9, allows access to Cross-origin resource sharing (CORS) protected resources if the user is only authenticated using the portal session authentication, which allows remote attackers to obtain sensitive information including the targeted user’s email address and current CSRF token.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Liferay Portal 和 Liferay DXP 安全漏洞
Vulnerability Description
Liferay Portal和Liferay DXP都是美国Liferay公司的产品。Liferay Portal是一套基于J2EE的门户解决方案。该方案使用了EJB以及JMS等技术，并可作为Web发布和共享工作区、企业协作平台、社交网络等。Liferay DXP是一套数字化体验协作平台。 Liferay Portal 7.2.0至7.3.2版本和Liferay DXP 7.2之前版本存在安全漏洞，该漏洞源于对应版本允许访问受跨源资源共享(CORS)保护的资源。如果用户仅通过门户会话身份验证进行验证，则远
CVSS Information
N/A
Vulnerability Type
N/A