CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25149

Liferay Portal 7.2.0 through 7.4.1, and older unsupported versions, and Liferay DXP 7.3 before service pack 3, 7.2 before fix pack 15, and older unsupported versions does not properly restrict membership of a child site when the "Limit membership to members of the parent site" option is enabled, which allows remote authenticated users to add users who are not a member of the parent site to a child site. The added user may obtain permission to perform unauthorized actions in the child site.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 41.5%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2024-25149

Liferay » Digital Experience Platform » Version: N/A

cpe:2.3:a:liferay:digital_experience_platform:-
Liferay » Digital Experience Platform » Version: 6.2

cpe:2.3:a:liferay:digital_experience_platform:6.2
Liferay » Digital Experience Platform » Version: 7.0

cpe:2.3:a:liferay:digital_experience_platform:7.0
Liferay » Digital Experience Platform » Version: 7.1

cpe:2.3:a:liferay:digital_experience_platform:7.1
Liferay » Digital Experience Platform » Version: 7.2

cpe:2.3:a:liferay:digital_experience_platform:7.2
Liferay » Digital Experience Platform » Version: 7.3

cpe:2.3:a:liferay:digital_experience_platform:7.3
Liferay » Liferay Portal » Version: N/A

cpe:2.3:a:liferay:liferay_portal:-
Liferay » Liferay Portal » Version: 1.7.5

cpe:2.3:a:liferay:liferay_portal:1.7.5
Liferay » Liferay Portal » Version: 1.8.0

cpe:2.3:a:liferay:liferay_portal:1.8.0
Liferay » Liferay Portal » Version: 1.9.0

cpe:2.3:a:liferay:liferay_portal:1.9.0
Liferay » Liferay Portal » Version: 1.9.1

cpe:2.3:a:liferay:liferay_portal:1.9.1
Liferay » Liferay Portal » Version: 1.9.5

cpe:2.3:a:liferay:liferay_portal:1.9.5
Liferay » Liferay Portal » Version: 2.0.0

cpe:2.3:a:liferay:liferay_portal:2.0.0
Liferay » Liferay Portal » Version: 2.0.3

cpe:2.3:a:liferay:liferay_portal:2.0.3
Liferay » Liferay Portal » Version: 2.1.0

cpe:2.3:a:liferay:liferay_portal:2.1.0
Liferay » Liferay Portal » Version: 2.1.1

cpe:2.3:a:liferay:liferay_portal:2.1.1
Liferay » Liferay Portal » Version: 2.2.0

cpe:2.3:a:liferay:liferay_portal:2.2.0
Liferay » Liferay Portal » Version: 2.2.1

cpe:2.3:a:liferay:liferay_portal:2.2.1
Liferay » Liferay Portal » Version: 2.2.5

cpe:2.3:a:liferay:liferay_portal:2.2.5
Liferay » Liferay Portal » Version: 3.0.0

cpe:2.3:a:liferay:liferay_portal:3.0.0
Liferay » Liferay Portal » Version: 3.1.0

cpe:2.3:a:liferay:liferay_portal:3.1.0
Liferay » Liferay Portal » Version: 3.2.0

cpe:2.3:a:liferay:liferay_portal:3.2.0
Liferay » Liferay Portal » Version: 3.5.0

cpe:2.3:a:liferay:liferay_portal:3.5.0
Liferay » Liferay Portal » Version: 3.6.0

cpe:2.3:a:liferay:liferay_portal:3.6.0
Liferay » Liferay Portal » Version: 3.6.1

cpe:2.3:a:liferay:liferay_portal:3.6.1
Liferay » Liferay Portal » Version: 4.0.0

cpe:2.3:a:liferay:liferay_portal:4.0.0
Liferay » Liferay Portal » Version: 4.1.0

cpe:2.3:a:liferay:liferay_portal:4.1.0
Liferay » Liferay Portal » Version: 4.1.1

cpe:2.3:a:liferay:liferay_portal:4.1.1
Liferay » Liferay Portal » Version: 4.1.2

cpe:2.3:a:liferay:liferay_portal:4.1.2
Liferay » Liferay Portal » Version: 4.1.3

cpe:2.3:a:liferay:liferay_portal:4.1.3
Liferay » Liferay Portal » Version: 4.2.0

cpe:2.3:a:liferay:liferay_portal:4.2.0
Liferay » Liferay Portal » Version: 4.2.1

cpe:2.3:a:liferay:liferay_portal:4.2.1
Liferay » Liferay Portal » Version: 4.2.2

cpe:2.3:a:liferay:liferay_portal:4.2.2
Liferay » Liferay Portal » Version: 4.3.0

cpe:2.3:a:liferay:liferay_portal:4.3.0
Liferay » Liferay Portal » Version: 4.3.1

cpe:2.3:a:liferay:liferay_portal:4.3.1
Liferay » Liferay Portal » Version: 4.3.2

cpe:2.3:a:liferay:liferay_portal:4.3.2
Liferay » Liferay Portal » Version: 4.3.3

cpe:2.3:a:liferay:liferay_portal:4.3.3
Liferay » Liferay Portal » Version: 4.3.4

cpe:2.3:a:liferay:liferay_portal:4.3.4
Liferay » Liferay Portal » Version: 4.3.5

cpe:2.3:a:liferay:liferay_portal:4.3.5
Liferay » Liferay Portal » Version: 4.3.6

cpe:2.3:a:liferay:liferay_portal:4.3.6
Liferay » Liferay Portal » Version: 4.4.0

cpe:2.3:a:liferay:liferay_portal:4.4.0
Liferay » Liferay Portal » Version: 4.4.1

cpe:2.3:a:liferay:liferay_portal:4.4.1
Liferay » Liferay Portal » Version: 4.4.2

cpe:2.3:a:liferay:liferay_portal:4.4.2
Liferay » Liferay Portal » Version: 5.0.0

cpe:2.3:a:liferay:liferay_portal:5.0.0
Liferay » Liferay Portal » Version: 5.1.0

cpe:2.3:a:liferay:liferay_portal:5.1.0
Liferay » Liferay Portal » Version: 5.1.1

cpe:2.3:a:liferay:liferay_portal:5.1.1
Liferay » Liferay Portal » Version: 5.1.2

cpe:2.3:a:liferay:liferay_portal:5.1.2
Liferay » Liferay Portal » Version: 5.2

cpe:2.3:a:liferay:liferay_portal:5.2
Liferay » Liferay Portal » Version: 5.2.0

cpe:2.3:a:liferay:liferay_portal:5.2.0
Liferay » Liferay Portal » Version: 5.2.1

cpe:2.3:a:liferay:liferay_portal:5.2.1
Liferay » Liferay Portal » Version: 5.2.2

cpe:2.3:a:liferay:liferay_portal:5.2.2
Liferay » Liferay Portal » Version: 5.2.3

cpe:2.3:a:liferay:liferay_portal:5.2.3
Liferay » Liferay Portal » Version: 6.0

cpe:2.3:a:liferay:liferay_portal:6.0
Liferay » Liferay Portal » Version: 6.0.0

cpe:2.3:a:liferay:liferay_portal:6.0.0
Liferay » Liferay Portal » Version: 6.0.1

cpe:2.3:a:liferay:liferay_portal:6.0.1
Liferay » Liferay Portal » Version: 6.0.2

cpe:2.3:a:liferay:liferay_portal:6.0.2
Liferay » Liferay Portal » Version: 6.0.3

cpe:2.3:a:liferay:liferay_portal:6.0.3
Liferay » Liferay Portal » Version: 6.0.4

cpe:2.3:a:liferay:liferay_portal:6.0.4
Liferay » Liferay Portal » Version: 6.0.5

cpe:2.3:a:liferay:liferay_portal:6.0.5
Liferay » Liferay Portal » Version: 6.0.6

cpe:2.3:a:liferay:liferay_portal:6.0.6
Liferay » Liferay Portal » Version: 6.1

cpe:2.3:a:liferay:liferay_portal:6.1
Liferay » Liferay Portal » Version: 6.1.0

cpe:2.3:a:liferay:liferay_portal:6.1.0
Liferay » Liferay Portal » Version: 6.1.1

cpe:2.3:a:liferay:liferay_portal:6.1.1
Liferay » Liferay Portal » Version: 6.1.2

cpe:2.3:a:liferay:liferay_portal:6.1.2
Liferay » Liferay Portal » Version: 6.1.2_ce_ga3

cpe:2.3:a:liferay:liferay_portal:6.1.2_ce_ga3
Liferay » Liferay Portal » Version: 6.1.x_ee

cpe:2.3:a:liferay:liferay_portal:6.1.x_ee
Liferay » Liferay Portal » Version: 6.2

cpe:2.3:a:liferay:liferay_portal:6.2
Liferay » Liferay Portal » Version: 6.2.0

cpe:2.3:a:liferay:liferay_portal:6.2.0
Liferay » Liferay Portal » Version: 6.2.1

cpe:2.3:a:liferay:liferay_portal:6.2.1
Liferay » Liferay Portal » Version: 6.2.2

cpe:2.3:a:liferay:liferay_portal:6.2.2
Liferay » Liferay Portal » Version: 6.2.3

cpe:2.3:a:liferay:liferay_portal:6.2.3
Liferay » Liferay Portal » Version: 6.2.4

cpe:2.3:a:liferay:liferay_portal:6.2.4
Liferay » Liferay Portal » Version: 6.2.5

cpe:2.3:a:liferay:liferay_portal:6.2.5
Liferay » Liferay Portal » Version: 6.2.x_ee

cpe:2.3:a:liferay:liferay_portal:6.2.x_ee
Liferay » Liferay Portal » Version: 7.0

cpe:2.3:a:liferay:liferay_portal:7.0
Liferay » Liferay Portal » Version: 7.0.0

cpe:2.3:a:liferay:liferay_portal:7.0.0
Liferay » Liferay Portal » Version: 7.0.1

cpe:2.3:a:liferay:liferay_portal:7.0.1
Liferay » Liferay Portal » Version: 7.0.2

cpe:2.3:a:liferay:liferay_portal:7.0.2
Liferay » Liferay Portal » Version: 7.0.3

cpe:2.3:a:liferay:liferay_portal:7.0.3
Liferay » Liferay Portal » Version: 7.0.3_ga4

cpe:2.3:a:liferay:liferay_portal:7.0.3_ga4
Liferay » Liferay Portal » Version: 7.0.4

cpe:2.3:a:liferay:liferay_portal:7.0.4
Liferay » Liferay Portal » Version: 7.0.5

cpe:2.3:a:liferay:liferay_portal:7.0.5
Liferay » Liferay Portal » Version: 7.0.6

cpe:2.3:a:liferay:liferay_portal:7.0.6
Liferay » Liferay Portal » Version: 7.1

cpe:2.3:a:liferay:liferay_portal:7.1
Liferay » Liferay Portal » Version: 7.1.0

cpe:2.3:a:liferay:liferay_portal:7.1.0
Liferay » Liferay Portal » Version: 7.1.1

cpe:2.3:a:liferay:liferay_portal:7.1.1
Liferay » Liferay Portal » Version: 7.1.2

cpe:2.3:a:liferay:liferay_portal:7.1.2
Liferay » Liferay Portal » Version: 7.1.3

cpe:2.3:a:liferay:liferay_portal:7.1.3
Liferay » Liferay Portal » Version: 7.2

cpe:2.3:a:liferay:liferay_portal:7.2
Liferay » Liferay Portal » Version: 7.2.0

cpe:2.3:a:liferay:liferay_portal:7.2.0
Liferay » Liferay Portal » Version: 7.2.1

cpe:2.3:a:liferay:liferay_portal:7.2.1
Liferay » Liferay Portal » Version: 7.3

cpe:2.3:a:liferay:liferay_portal:7.3
Liferay » Liferay Portal » Version: 7.3.0

cpe:2.3:a:liferay:liferay_portal:7.3.0
Liferay » Liferay Portal » Version: 7.3.1

cpe:2.3:a:liferay:liferay_portal:7.3.1
Liferay » Liferay Portal » Version: 7.3.2

cpe:2.3:a:liferay:liferay_portal:7.3.2
Liferay » Liferay Portal » Version: 7.3.3

cpe:2.3:a:liferay:liferay_portal:7.3.3
Liferay » Liferay Portal » Version: 7.3.4

cpe:2.3:a:liferay:liferay_portal:7.3.4
Liferay » Liferay Portal » Version: 7.3.5

cpe:2.3:a:liferay:liferay_portal:7.3.5
Liferay » Liferay Portal » Version: 7.3.6

cpe:2.3:a:liferay:liferay_portal:7.3.6
Liferay » Liferay Portal » Version: 7.3.7

cpe:2.3:a:liferay:liferay_portal:7.3.7
Liferay » Liferay Portal » Version: 7.4.0

cpe:2.3:a:liferay:liferay_portal:7.4.0
Liferay » Liferay Portal » Version: 7.4.1

cpe:2.3:a:liferay:liferay_portal:7.4.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-25149

Products

Pricing

Contact Us