CVE-2008-0563: CSRF
Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to perform unspecified actions as unspecified authenticated users via the User-Agent HTTP header, which is used when composing Forgot Password e-mail messages in HTML format.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0563?
CVE-2008-0563 is considered a moderate severity vulnerability due to its potential impact on user security.
How do I fix CVE-2008-0563?
To fix CVE-2008-0563, upgrade to a version of Liferay Portal that has addressed this vulnerability.
What type of attack is associated with CVE-2008-0563?
CVE-2008-0563 is associated with cross-site request forgery (CSRF) attacks that can exploit authenticated users.
Which version of Liferay is affected by CVE-2008-0563?
Liferay Portal version 4.3.6 is affected by CVE-2008-0563.
What specific actions can attackers perform due to CVE-2008-0563?
Attackers can potentially perform unspecified actions as authenticated users through the manipulation of the User-Agent HTTP header.