22Eki
CVE-2024-26272 | Liferay Portal/DXP Content Page Editor p_l_back_url cross-site request forgery
A vulnerability was found in Liferay Portal and DXP. It has been classified as problematic. Affected is an unknown function of the component Content Page Editor. The manipulation of the argument p_l_back_url leads to cross-site request forgery. This vulnerability is traded as CVE-2024-26272. It is possible to launch the attack remotely. There is no exploit available.