Beveiligingsadvies

CVE-2025-3526

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-16 14:18:34

Laatst bijgewerkt 2025-06-16 14:41:32

Toegewezen door Liferay

CVSS-score 8.7

Status PUBLISHED

Beschrijving

SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saving of request parameters in the HTTP session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP requests.

← Alle CVE's bekijken Bekijk op cve.org ↗