Description
The Profile widget in Liferay Portal 7.4.0 through 7.4.3.111, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.5, 2023.Q3.1 through 2023.Q3.8, 7.4 GA through update 92, and older unsupported versions uses a user’s name in the “Content-Disposition” header, which allows remote authenticated users to change the file extension when a vCard file is downloaded.
Remediation
References
Related Vulnerabilities
MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-4306)
Sqlite NULL Pointer Dereference Vulnerability (CVE-2019-19880)
Pega Infinity CVE-2021-27653 Vulnerability (CVE-2021-27653)
SharePoint CVE-2020-0975 Vulnerability (CVE-2020-0975)
WordPress Plugin Google XML Sitemap for Images Cross-Site Request Forgery (2.1.3)