CVE-2008-0182

MEDIUM 4.3CVE-2008-0182 · Published 05/02/2008 · updated 16/06/2026

In short

CVE-2008-0182 is a MEDIUM (CVSS 4.3) vulnerability affecting liferay enterprise portal (liferay).
Chance of exploitation in the next 30 days (EPSS): 0.60%, higher than 48.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
liferay enterprise portal liferay	`≤ 4.3.6`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.

References

secunia.com/advisories/28742 · Vendor Advisory
support.liferay.com/browse/LEP-4739
kb.cert.org/vuls/id/767825 · US Government Resource

More vulnerabilities in liferay enterprise portal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free