VULNERABILITY INTELLIGENCE

CVE-2008-0182

CVSS score4.3 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2008-02-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references