CVE-2024-25144

The IFrame widget in Liferay Portal 7.2.0 through 7.4.3.26, and older unsupported versions, and Liferay DXP 7.4 before update 27, 7.3 before update 6, 7.2 before fix pack 19, and older unsupported versions does not check the URL of the IFrame, which allows remote authenticated users to cause a denial-of-service (DoS) via a self referencing IFrame.

List of 486 websites affected by CVE-2024-25144

The domain names are hidden due to the sensitivity of the data. Please click on the "Contact us" button above to get more information.

Domain	Country	Rank
**********.it	United States	,*
**.*.it	Italy	,*
****.*.*.hu	Hungary	,*
*******.es	Spain	,*
...ir	Iran	,*
******.es	Spain	,*
*********.org	United States	,*
**.*.it	Italy	,*
***.com	United States	,*
****************.org	France	*,*
*..ca	Canada	*,*
**.*.br	Brazil	*,*
********.eu	GB	*,*
**.*.pt	Portugal	*,*
****.es	Spain	*,*
******.*.co	Colombia	*,*
*************.pl	Poland	*,*
*************.eu	Italy	*,*
******.eu	United States	*,*
**************.cat	Spain	*,*