CyberSec.Space Logo
Back to CVE Browser

CVE-2021-33323

HIGH
7.5
CVSS Severity Score
EPSS Score0.0310%
EPSS Percentile42.55th
PublishedAug 3, 2021
Last ModifiedMay 13, 2025

Vulnerability Description

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.

Affected Platforms (CPE)

📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Liferay Portal

>= 7.1.0 and < 7.3.1

References & Advisories

🔗 https://issues.liferay.com/browse/LPE-17049
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747107
🔗 https://issues.liferay.com/browse/LPE-17049
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747107

Related Vulnerabilities

CVE-2020-262467.7

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website s...

CVE-2021-2195010.0

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of...

CVE-2021-4393610.0

The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically pr...

CVE-2021-3850310.0

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executi...