CVE-2008-0182

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-02-05 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.

Affected products

Liferay Enterprise Portal: through 4.3.6

References

http://secunia.com/advisories/28742
http://support.liferay.com/browse/LEP-4739
http://www.kb.cert.org/vuls/id/767825
http://secunia.com/advisories/28742
http://support.liferay.com/browse/LEP-4739
http://www.kb.cert.org/vuls/id/767825

Get alerted when CVE-2008-0182 or the next vulnerability affects your stack