CVE:CVE-2008-0182
CNNVD:CNNVD-200802-045
4.4.0版本以前的Liferay Portal的Admin端口中的跨站脚本攻击漏洞会允许远程授权用户通过关闭消息来实施未知行动。
solution:Upgrade liferay liferay_enterprise_portal to a higher version than 4.3.6,and avoid the version (,4.3.6]