CSRF in Liferay Enterprise Portal
CVE-2008-0182
Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (45.3th percentile) — read the EPSS interpretation.
Affected products
- Liferay Liferay_enterprise_portal
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- cret@cert.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cret@cert.org (x_refsource_CONFIRM)