<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Tue, 05 May 2026 02:34:36 +0000</lastBuildDate>
    <item>
      <title>7d97fbf5-7e6e-47af-9bda-3391635e5622</title>
      <link>https://vulnerability.circl.lu/sighting/7d97fbf5-7e6e-47af-9bda-3391635e5622/export</link>
      <description>{"uuid": "7d97fbf5-7e6e-47af-9bda-3391635e5622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33949", "type": "seen", "source": "https://t.me/cibsecurity/64701", "content": "\u203c CVE-2023-33949 \u203c\n\nIn Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.2 and earlier the default configuration does not require users to verify their email address, which allows remote attackers to create accounts using fake email addresses or email addresses which they don't control. The portal property `company.security.strangers.verify` should be set to true.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:25.000000Z"}</description>
      <content:encoded>{"uuid": "7d97fbf5-7e6e-47af-9bda-3391635e5622", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-33949", "type": "seen", "source": "https://t.me/cibsecurity/64701", "content": "\u203c CVE-2023-33949 \u203c\n\nIn Liferay Portal 7.3.0 and earlier, and Liferay DXP 7.2 and earlier the default configuration does not require users to verify their email address, which allows remote attackers to create accounts using fake email addresses or email addresses which they don't control. The portal property `company.security.strangers.verify` should be set to true.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-24T20:27:25.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/7d97fbf5-7e6e-47af-9bda-3391635e5622/export</guid>
      <pubDate>Wed, 24 May 2023 20:27:25 +0000</pubDate>
    </item>
  </channel>
</rss>
