Lucene search
PRIOn knowledge basePRION:CVE-2021-33323HistoryAug 03, 2021 - 7:15 p.m.
Design/Logic Flaw
2021-08-0319:15:00
PRIOn knowledge base
www.prio-n.com
5
The Dynamic Data Mapping module in Liferay Portal 7.1.0 through 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote attackers to view the autosaved values by viewing the form as an unauthenticated user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dxp | eq | 7.2 fixpack2 | |
| dxp | eq | 7.2 fixpack3 | |
| dxp | eq | 7.2 fixpack4 | |
| dxp | eq | 7.2 fixpack5 | |
| dxp | eq | 7.2 fixpack1 | |
| dxp | eq | 7.1 fixpack6 | |
| dxp | eq | 7.1 fixpack7 | |
| dxp | eq | 7.1 fixpack8 | |
| dxp | eq | 7.1 fixpack9 | |
| dxp | eq | 7.1 fixpack10 |
Related
cnvd
cnvd
nvd
nvd
CVE-2021-33323
2021-08-03 19:15:08
osv
osv
CVE-2021-33323
2021-08-03 19:15:08
cve
cve
CVE-2021-33323
2021-08-03 19:15:08
cvelist
cvelist
CVE-2021-33323
2021-08-03 18:19:24