deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-3wfh-36rx-9537
Package: com.ongres.scram:scram-common (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-208: Observable Timing Discrepancy, CWE-385: Covert Timing Channel
Vulnerable versions: < 3.2
Patched in: 3.2

Summary: Timing Attack Vulnerability in SCRAM Authentication

Details:
### Impact

A timing attack vulnerability exists in the SCRAM Java implementation. The issue arises because `Arrays.equals` was used to compare secret values such as client proofs and server signatures. Since `Arrays.equals` performs a short-circuit comparison, the execution time varies depending on how many leading bytes match. This behavior could allow an attacker to perform a timing side-channel attack and potentially infer sensitive authentication material. All users relying on SCRAM authentication are impacted.

### Patches

This vulnerability has been patched by replacing `Arrays.equals` with `MessageDigest.isEqual`, which ensures constant-time comparison.

Users should upgrade to version **3.2** or later to mitigate this issue.

### Workarounds

Because the attack requires high precision and repeated attempts, the risk is limited, but the only reliable mitigation is to upgrade to a patched release (version 3.2 or later).

### References

- [Java `MessageDigest.isEqual` Documentation](https://docs.oracle.com/en/java/javase/25/docs/api/java.base/java/security/MessageDigest.html#isEqual(byte[],byte[]))
GitHub Security Advisory: GHSA-95h4-8mqc-4mpf
Package: com.liferay.portal:com.liferay.portal.impl (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-606: Unchecked Input for Loop Condition
Vulnerable versions: < 101.0.0
Patched in: 101.0.0

Summary: Liferay Portal has unchecked input for loop condition vulnerability in XML-RPC

Details:
Unchecked input for loop condition vulnerability in XML-RPC in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to perform a denial-of-service (DoS) attacks via a crafted XML-RPC request.
GitHub Security Advisory: GHSA-q2cj-h8fw-q4cc
Package: org.springframework.cloud:spring-cloud-gateway-server-webflux (MAVEN)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 4.3.0, < 4.3.1
Patched in: 4.3.1

Summary: Spring Expression language property modification using Spring Cloud Gateway Server WebFlux

Details:
Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  *  The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  *  Spring Boot actuator is a dependency.
  *  The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  *  The actuator endpoints are available to attackers.
  *  The actuator endpoints are unsecured.
GitHub Security Advisory: GHSA-q2cj-h8fw-q4cc
Package: org.springframework.cloud:spring-cloud-gateway-server-webflux (MAVEN)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 4.2.0, < 4.2.5
Patched in: 4.2.5

Summary: Spring Expression language property modification using Spring Cloud Gateway Server WebFlux

Details:
Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  *  The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  *  Spring Boot actuator is a dependency.
  *  The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  *  The actuator endpoints are available to attackers.
  *  The actuator endpoints are unsecured.
GitHub Security Advisory: GHSA-q2cj-h8fw-q4cc
Package: org.springframework.cloud:spring-cloud-gateway-server-webflux (MAVEN)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 4.0.0, <= 4.1.10
Patched in: unpatched

Summary: Spring Expression language property modification using Spring Cloud Gateway Server WebFlux

Details:
Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  *  The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  *  Spring Boot actuator is a dependency.
  *  The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  *  The actuator endpoints are available to attackers.
  *  The actuator endpoints are unsecured.
GitHub Security Advisory: GHSA-q2cj-h8fw-q4cc
Package: org.springframework.cloud:spring-cloud-gateway-server-webflux (MAVEN)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-94: Improper Control of Generation of Code ('Code Injection')
Vulnerable versions: >= 3.1.0, <= 3.1.10
Patched in: unpatched

Summary: Spring Expression language property modification using Spring Cloud Gateway Server WebFlux

Details:
Spring Cloud Gateway Server Webflux may be vulnerable to Spring Environment property modification.

An application should be considered vulnerable when all the following are true:

  *  The application is using Spring Cloud Gateway Server Webflux (Spring Cloud Gateway Server WebMVC is not vulnerable).
  *  Spring Boot actuator is a dependency.
  *  The Spring Cloud Gateway Server Webflux actuator web endpoint is enabled via management.endpoints.web.exposure.include=gateway.
  *  The actuator endpoints are available to attackers.
  *  The actuator endpoints are unsecured.
GitHub Security Advisory: GHSA-jmp9-x22r-554x
Package: org.springframework:spring-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-285: Improper Authorization, CWE-863: Incorrect Authorization
Vulnerable versions: >= 6.2.0, <= 6.2.10
Patched in: 6.2.11

Summary: Spring Framework annotation detection mechanism may result in improper authorization

Details:
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.

Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.

You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.

This CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
GitHub Security Advisory: GHSA-jmp9-x22r-554x
Package: org.springframework:spring-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-285: Improper Authorization, CWE-863: Incorrect Authorization
Vulnerable versions: >= 6.0.0, <= 6.1.22
Patched in: unpatched

Summary: Spring Framework annotation detection mechanism may result in improper authorization

Details:
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.

Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.

You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.

This CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
GitHub Security Advisory: GHSA-jmp9-x22r-554x
Package: org.springframework:spring-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-285: Improper Authorization, CWE-863: Incorrect Authorization
Vulnerable versions: >= 5.3.0, <= 5.3.44
Patched in: unpatched

Summary: Spring Framework annotation detection mechanism may result in improper authorization

Details:
The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions.

Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.

You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.

This CVE is published in conjunction with  CVE-2025-41248 https://spring.io/security/cve-2025-41248 .
GitHub Security Advisory: GHSA-8v5q-rhf3-jphm
Package: org.springframework.security:spring-security-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-289: Authentication Bypass by Alternate Name, CWE-863: Incorrect Authorization
Vulnerable versions: >= 6.5.0, < 6.5.4
Patched in: 6.5.4

Summary: Spring Security annotation detection mechanism has authorization bypass

Details:
The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.

Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.

You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.

This CVE is published in conjunction with  CVE-2025-41249 https://spring.io/security/cve-2025-41249 .
GitHub Security Advisory: GHSA-8v5q-rhf3-jphm
Package: org.springframework.security:spring-security-core (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-289: Authentication Bypass by Alternate Name, CWE-863: Incorrect Authorization
Vulnerable versions: >= 6.4.0, < 6.4.10
Patched in: 6.4.10

Summary: Spring Security annotation detection mechanism has authorization bypass

Details:
The Spring Security annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue when using @PreAuthorize and other method security annotations, resulting in an authorization bypass.

Your application may be affected by this if you are using Spring Security's @EnableMethodSecurity feature.

You are not affected by this if you are not using @EnableMethodSecurity or if you do not use security annotations on methods in generic superclasses or generic interfaces.

This CVE is published in conjunction with  CVE-2025-41249 https://spring.io/security/cve-2025-41249 .
GitHub Security Advisory: GHSA-vg6h-g5mr-9hgv
Package: com.liferay.workspace:com.liferay.ticket.workspace (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 20[PII_REDACTED]
Patched in: 20[PII_REDACTED]

Summary: Liferay Stored Cross-site Scripting vulnerability

Details:
Stored cross-site scripting (XSS) vulnerability in a custom object’s /o/c/<object-name> API endpoint in Liferay Portal 7.4.3.51 through 7.4.3.109, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 update 51 through update 92, and 7.3 update 33 through update 35 allows remote attackers to inject arbitrary web script or HTML via the externalReferenceCode parameter.
GitHub Security Advisory: GHSA-25m3-w28p-v3v3
Package: com.liferay:com.liferay.site.admin.web (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-1188: Initialization of a Resource with an Insecure Default
Vulnerable versions: < 5.0.111
Patched in: 5.0.111

Summary: Liferay has Insecure Default Initialization of Resource issue

Details:
In Liferay Portal 7.1.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions, the default membership type of a newly created site is “Open” which allows any registered users to become a member of the site. A remote attacker with site membership can potentially view, add or edit content on the site.
GitHub Security Advisory: GHSA-2363-cqg2-863c
Package: org.jdom:jdom (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: <= 2.0.2
Patched in: unpatched

Summary: XML External Entity (XXE) Injection in JDOM

Details:
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call `builder.setExpandEntities(false)` and they won't be expanded.
GitHub Security Advisory: GHSA-2363-cqg2-863c
Package: org.jdom:jdom2 (MAVEN)
Severity: HIGH (CVSS 7.5)
CWE: CWE-611: Improper Restriction of XML External Entity Reference
Vulnerable versions: < 2.0.6.1
Patched in: 2.0.6.1

Summary: XML External Entity (XXE) Injection in JDOM

Details:
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. As a workaround, to avoid external entities being expanded, one can call `builder.setExpandEntities(false)` and they won't be expanded.
GitHub Security Advisory: GHSA-43xf-59vr-g4f2
Package: com.liferay.portal:release.portal.bom (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-1393: Use of Default Password
Vulnerable versions: >= 7.4.0, < 7.4.3.112
Patched in: 7.4.3.112

Summary: Liferay Portal Uses Default Password

Details:
Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35, and older unsupported versions does not limit access to APIs before a user has changed their initial password, which allows remote users to access and edit content via the API.
GitHub Security Advisory: GHSA-4p5r-3jmm-652q
Package: com.liferay:com.liferay.multi.factor.authentication.timebased.otp.web (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-304: Missing Critical Step in Authentication
Vulnerable versions: < 2.0.25
Patched in: 2.0.25

Summary: Liferay DXP Missing Critical Step in Authentication

Details:
Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password (TOTP) to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user.
GitHub Security Advisory: GHSA-jfv5-r382-xvwh
Package: com.liferay:com.liferay.dynamic.data.mapping.form.field.type (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 6.0.167
Patched in: 6.0.167

Summary: Liferay Portal Cross-site Scripting (XSS) vulnerability

Details:
Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4 and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into an object with a rich text type field.
GitHub Security Advisory: GHSA-5c6v-fqcw-w6q5
Package: com.liferay:com.liferay.dynamic.data.mapping.form.field.type (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 6.0.167
Patched in: 6.0.167

Summary: Liferay Portal vulnerable to Cross-site Scripting

Details:
Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a "Rich Text" type field to (1) a web content structure, (2) a Documents and Media Document Type , or (3) custom assets that uses the Data Engine's module Rich Text field.
GitHub Security Advisory: GHSA-5hmf-8wx5-4qq3
Package: org.apache.fory:fory-core (MAVEN)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-502: Deserialization of Untrusted Data
Vulnerable versions: < 0.12.2
Patched in: 0.12.2

Summary: Apache Fory Deserialization of Untrusted Data vulnerability

Details:
A vulnerability in Apache Fory allows a remote attacker to cause a Denial of Service (DoS). The issue stems from the insecure deserialization of untrusted data. An attacker can supply a large, specially crafted data payload that, when processed, consumes an excessive amount of CPU resources during the deserialization process. This leads to CPU exhaustion, rendering the application or system using the Apache Fory library unresponsive and unavailable to legitimate users.

Users of Apache Fory are strongly advised to upgrade to version 0.12.2 or later to mitigate this vulnerability. Developers of libraries and applications that depend on Apache Fory should update their dependency requirements to Apache Fory 0.12.2 or later and release new versions of their software.
GitHub Security Advisory: GHSA-vp64-77c6-33h8
Package: com.liferay.portal:com.liferay.portal.kernel (MAVEN)
Severity: LOW (CVSS 0.0)
CWE: CWE-15: External Control of System or Configuration Setting
Vulnerable versions: < 130.0.1
Patched in: 130.0.1

Summary: Liferay Portal has External Control of System or Configuration Settings

Details:
Remote staging in Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions does not properly obtain the remote address of the live site from the database which, which allows remote authenticated users to exfiltrate data to an attacker controlled server (i.e., a fake “live site”) via the _com_liferay_exportimport_web_portlet_ExportImportPortlet_remoteAddress and _com_liferay_exportimport_web_portlet_ExportImportPortlet_remotePort parameters. To successfully exploit this vulnerability, an attacker must also successfully obtain the staging server’s shared secret and add the attacker controlled server to the staging server’s whitelist.
GitHub Security Advisory: GHSA-xvgg-9h29-4g34
Package: com.liferay.portal:com.liferay.portal.kernel (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-1284: Improper Validation of Specified Quantity in Input
Vulnerable versions: < 130.0.1
Patched in: 130.0.1

Summary: Liferay Portal has Improper Validation of Specified Quantity in Input

Details:
Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions may incorrectly identify the subdomain of a domain name and create a supercookie, which allows remote attackers who control a website that share the same TLD to read cookies set by the application.
GitHub Security Advisory: GHSA-xvgg-9h29-4g34
Package: com.liferay.portal:com.liferay.portal.impl (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-1284: Improper Validation of Specified Quantity in Input
Vulnerable versions: < 96.0.0
Patched in: 96.0.0

Summary: Liferay Portal has Improper Validation of Specified Quantity in Input

Details:
Liferay Portal 7.4.0 through 7.4.3.105, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions may incorrectly identify the subdomain of a domain name and create a supercookie, which allows remote attackers who control a website that share the same TLD to read cookies set by the application.
GitHub Security Advisory: GHSA-2jfg-73q2-24qv
Package: com.xuxueli:xxl-sso (MAVEN)
Severity: LOW (CVSS 4.3)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: <= 1.1.0
Patched in: unpatched

Summary: Xuxueli XXL-SSO Cross-site Scripting vulnerability

Details:
A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the file /xxl-sso-server/login. The manipulation of the argument errorMsg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
GitHub Security Advisory: GHSA-r45v-2289-jgr4
Package: com.liferay.portal:com.liferay.portal.impl (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: < 99.0.0
Patched in: 99.0.0

Summary: Liferay Portal has stored cross-site scripting (XSS) vulnerability

Details:
A stored cross-site scripting (XSS) vulnerability in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote authenticated attackers with the instance administrator role to inject arbitrary web script or HTML into all pages via a crafted payload injected into the Instance Configuration's (1) CDN Host HTTP text field or (2) CDN Host HTTPS text field.
GitHub Security Advisory: GHSA-g8fh-pfw3-8rmr
Package: com.liferay:com.liferay.users.admin.web (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Vulnerable versions: >= 6.0.6, < 11.0.33
Patched in: 11.0.33

Summary: Liferay Portal's selection modal is vulnerable to XSS

Details:
A stored cross-site scripting vulnerability in the Liferay Portal  7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q3.0, 2025.Q2.0 through 2025.Q2.12, 2025.Q1.0 through 2025.Q1.17, 2024.Q4.0 through 2024.Q4.7, 2024.Q3.0 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13 and 2024.Q1.1 through 2024.Q1.20 allows an remote authenticated attacker to inject JavaScript through the organization site names. The malicious payload is stored and executed without proper sanitization or escaping.
GitHub Security Advisory: GHSA-m55r-9fx8-725j
Package: com.liferay:com.liferay.site.admin.web (MAVEN)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
Vulnerable versions: >= 2.0.4, < 5.0.103
Patched in: 5.0.103

Summary: Liferay Portal's System, Instance and Site Settings are vulnerable to Open Redirect

Details:
An open redirect vulnerability in the System Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4 , 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_configuration_admin_web_portlet_SystemSettingsPortlet_redirect parameter.

An open redirect vulnerability in the Instance Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_configuration_admin_web_portlet_InstanceSettingsPortlet_redirect parameter.

An open redirect vulnerability in the Site Settings in Liferay Portal 7.1.0 through 7.4.3.101, and Liferay DXP 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92, 7.3 GA through update 35, and older unsupported versions allows remote attackers to redirect users to arbitrary external URLs via the _com_liferay_site_admin_web_portlet_SiteSettingsPortlet_redirect parameter.