CVE-2024-26272 | Liferay Portal/DXP Content Page Editor p_l_back_url cross-site request forgery

A vulnerability was found in Liferay Portal and DXP. It has been classified as problematic. Affected is an unknown function of the component Content Page Editor. The manipulation of the argument p_l_back_url leads to cross-site request forgery.

This vulnerability is traded as CVE-2024-26272. It is possible to launch the attack remotely. There is no exploit available.