CyberSec.Space Logo
返回 CVE 浏览器

CVE-2021-33323

HIGH
7.5
CVSS Severity Score
EPSS Score0.0310%
EPSS Percentile42.55th
Published2021年8月3日
Last Modified2025年5月13日

Vulnerability Description

The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.

Affected Platforms (CPE)

📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.1
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Digital Experience Platform

= 7.2
📦
Liferay

Liferay Portal

>= 7.1.0 and < 7.3.1

References & Advisories

🔗 https://issues.liferay.com/browse/LPE-17049
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747107
🔗 https://issues.liferay.com/browse/LPE-17049
🔗 https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120747107

相关漏洞威胁

CVE-2020-262467.7

Pimcore is an open source digital experience platform. In Pimcore before version 6.8.5 it is possible to modify & create website s...

CVE-2021-2124310.0

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deser...

CVE-2021-021110.0

An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon ...

CVE-2021-2124410.0

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server sid...