CVE-2008-0182: Liferay Enterprise Portal

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to perform unspecified actions as unspecified other authenticated users via the Shutdown message.

Affected products

• Liferay Liferay Enterprise Portal: up to and including 4.3.6

Published 2008-02-05. Last modified 2026-06-16.