Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2024-26273

Cross-site request forgery (CSRF) vulnerability in the content page editor in Liferay Portal 7.4.0 through 7.4.3.103, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, 2023.Q3.1 through 2023.Q3.5, 7.4 GA through update 92 and 7.3 update 29 through update 35 allows remote attackers to (1) change user passwords, (2) shut down the server, (3) execute arbitrary code in the scripting console, (4) and perform other administrative actions via the _com_liferay_commerce_catalog_web_internal_portlet_CommerceCatalogsPortlet_redirect parameter.

  • Published: Oct 22, 2024
  • Updated: May 4, 2025
  • CVE: CVE-2024-26273
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.8
  • AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
liferay / digital_experience_platform 7.4-update34 7.4-update34.x
liferay / digital_experience_platform 7.4-update1 7.4-update1.x
liferay / digital_experience_platform 7.4 7.4.x
liferay / digital_experience_platform 7.4-update36 7.4-update36.x
liferay / digital_experience_platform 7.4-update41 7.4-update41.x
liferay / digital_experience_platform 7.4-update52 7.4-update52.x
liferay / digital_experience_platform 7.4-update86 7.4-update86.x
liferay / digital_experience_platform 7.4-update85 7.4-update85.x
liferay / digital_experience_platform 7.4-update84 7.4-update84.x
liferay / digital_experience_platform 7.4-update83 7.4-update83.x
liferay / digital_experience_platform 7.4-update82 7.4-update82.x
liferay / digital_experience_platform 7.4-update81 7.4-update81.x
liferay / digital_experience_platform 7.4-update76 7.4-update76.x
liferay / digital_experience_platform 7.4-update67 7.4-update67.x
liferay / digital_experience_platform 7.4-update62 7.4-update62.x
liferay / digital_experience_platform 7.4-update50 7.4-update50.x
liferay / digital_experience_platform 7.4-update48 7.4-update48.x
liferay / digital_experience_platform 7.4-update21 7.4-update21.x
liferay / liferay_portal 7.4.0 7.4.3.104
liferay / digital_experience_platform 7.3-update35 7.3-update35.x
liferay / digital_experience_platform 7.3-update34 7.3-update34.x
liferay / digital_experience_platform 7.3-update33 7.3-update33.x
liferay / digital_experience_platform 7.3-update32 7.3-update32.x
liferay / digital_experience_platform 7.3-update29 7.3-update29.x
liferay / digital_experience_platform 7.4-update92 7.4-update92.x
liferay / digital_experience_platform 7.4-update91 7.4-update91.x
liferay / digital_experience_platform 7.4-update90 7.4-update90.x
liferay / digital_experience_platform 7.4-update75 7.4-update75.x
liferay / digital_experience_platform 7.4-update15 7.4-update15.x
liferay / digital_experience_platform 7.4-update14 7.4-update14.x
liferay / digital_experience_platform 7.4-update13 7.4-update13.x
liferay / digital_experience_platform 7.4-update12 7.4-update12.x
liferay / digital_experience_platform 7.4-update11 7.4-update11.x
liferay / digital_experience_platform 7.4-update10 7.4-update10.x
liferay / digital_experience_platform 7.4-update9 7.4-update9.x
liferay / digital_experience_platform 7.4-update8 7.4-update8.x
liferay / digital_experience_platform 7.4-update7 7.4-update7.x
liferay / digital_experience_platform 7.4-update6 7.4-update6.x
liferay / digital_experience_platform 7.4-update5 7.4-update5.x
liferay / digital_experience_platform 7.4-update4 7.4-update4.x
liferay / digital_experience_platform 7.4-update3 7.4-update3.x
liferay / digital_experience_platform 7.4-update2 7.4-update2.x
liferay / digital_experience_platform 7.4-update89 7.4-update89.x
liferay / digital_experience_platform 7.4-update88 7.4-update88.x
liferay / digital_experience_platform 7.4-update87 7.4-update87.x
liferay / digital_experience_platform 7.4-update80 7.4-update80.x
liferay / digital_experience_platform 7.4-update79 7.4-update79.x
liferay / digital_experience_platform 7.4-update78 7.4-update78.x
liferay / digital_experience_platform 7.4-update77 7.4-update77.x
liferay / digital_experience_platform 7.4-update74 7.4-update74.x
liferay / digital_experience_platform 7.4-update73 7.4-update73.x
liferay / digital_experience_platform 7.4-update72 7.4-update72.x
liferay / digital_experience_platform 7.4-update71 7.4-update71.x
liferay / digital_experience_platform 7.4-update70 7.4-update70.x
liferay / digital_experience_platform 7.4-update69 7.4-update69.x
liferay / digital_experience_platform 7.4-update68 7.4-update68.x
liferay / digital_experience_platform 7.4-update66 7.4-update66.x
liferay / digital_experience_platform 7.4-update65 7.4-update65.x
liferay / digital_experience_platform 7.4-update64 7.4-update64.x
liferay / digital_experience_platform 7.4-update63 7.4-update63.x
liferay / digital_experience_platform 7.4-update61 7.4-update61.x
liferay / digital_experience_platform 7.4-update60 7.4-update60.x
liferay / digital_experience_platform 7.4-update59 7.4-update59.x
liferay / digital_experience_platform 7.4-update58 7.4-update58.x
liferay / digital_experience_platform 7.4-update57 7.4-update57.x
liferay / digital_experience_platform 7.4-update56 7.4-update56.x
liferay / digital_experience_platform 7.4-update55 7.4-update55.x
liferay / digital_experience_platform 7.4-update54 7.4-update54.x
liferay / digital_experience_platform 7.4-update53 7.4-update53.x
liferay / digital_experience_platform 7.4-update51 7.4-update51.x
liferay / digital_experience_platform 7.4-update49 7.4-update49.x
liferay / digital_experience_platform 7.4-update47 7.4-update47.x
liferay / digital_experience_platform 7.4-update46 7.4-update46.x
liferay / digital_experience_platform 7.4-update45 7.4-update45.x
liferay / digital_experience_platform 7.4-update44 7.4-update44.x
liferay / digital_experience_platform 7.4-update43 7.4-update43.x
liferay / digital_experience_platform 7.4-update42 7.4-update42.x
liferay / digital_experience_platform 7.4-update40 7.4-update40.x
liferay / digital_experience_platform 7.4-update39 7.4-update39.x
liferay / digital_experience_platform 7.4-update38 7.4-update38.x
liferay / digital_experience_platform 7.4-update37 7.4-update37.x
liferay / digital_experience_platform 7.4-update35 7.4-update35.x
liferay / digital_experience_platform 7.4-update33 7.4-update33.x
liferay / digital_experience_platform 7.4-update32 7.4-update32.x
liferay / digital_experience_platform 7.4-update31 7.4-update31.x
liferay / digital_experience_platform 7.4-update30 7.4-update30.x
liferay / digital_experience_platform 7.4-update29 7.4-update29.x
liferay / digital_experience_platform 7.4-update28 7.4-update28.x
liferay / digital_experience_platform 7.4-update27 7.4-update27.x
liferay / digital_experience_platform 7.4-update26 7.4-update26.x
liferay / digital_experience_platform 7.3-update31 7.3-update31.x
liferay / digital_experience_platform 7.3-update30 7.3-update30.x
liferay / digital_experience_platform 7.4-update25 7.4-update25.x
liferay / digital_experience_platform 7.4-update24 7.4-update24.x
liferay / digital_experience_platform 7.4-update23 7.4-update23.x
liferay / digital_experience_platform 7.4-update22 7.4-update22.x
liferay / digital_experience_platform 7.4-update20 7.4-update20.x
liferay / digital_experience_platform 7.4-update19 7.4-update19.x
liferay / digital_experience_platform 7.4-update18 7.4-update18.x
liferay / digital_experience_platform 7.4-update17 7.4-update17.x
liferay / digital_experience_platform 7.4-update16 7.4-update16.x
liferay / digital_experience_platform 2023.q3.1 2023.q3.6
liferay / digital_experience_platform 2023.q4.0 2023.q4.3