liferay dxp 7.1 vulnerabilities and exploits

(subscribe to this query)

A SQL injection vulnerability in the Layout module in Liferay Portal 7.1.3 up to and including 7.4.3.4, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 17, 7.3 before service pack 3, and 7.4 GA allows remote authenticated malicious users to execute arbitrary SQL comma...

Liferay Liferay Portal Liferay Dxp 7.2 Liferay Dxp 7.1 Liferay Dxp 7.3 Liferay Dxp 7.4

Liferay Portal prior to 7.3.0, and Liferay DXP 7.0 before fix pack 89, 7.1 before fix pack 17, and 7.2 before fix pack 4, does not safely test a connection to a LDAP server, which allows remote malicious users to obtain the LDAP server's password via the Test LDAP Connection...

Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

In Liferay Portal prior to 7.3.2 and Liferay DXP 7.0 before fix pack 92, 7.1 before fix pack 18, and 7.2 before fix pack 6, the template API does not restrict user access to sensitive objects, which allows remote authenticated users to execute arbitrary code via crafted FreeMarke...

Liferay Liferay Portal 7.1 Liferay Liferay Portal 7.1.1 Liferay Liferay Portal 7.2 Liferay Liferay Portal 7.3

1 Github repository

Liferay Portal prior to 7.3.0, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17, and 7.2 before fix pack 5, allows man-in-the-middle malicious users to execute arbitrary code via crafted serialized payloads, because of insecure deserialization.

Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

In Liferay Portal 7.3.0 and previous versions, and Liferay DXP 7.2 and previous versions the default configuration does not require users to verify their email address, which allows remote malicious users to create accounts using fake email addresses or email addresses which they...

Liferay Digital Experience Platform 7.2 Liferay Digital Experience Platform 7.1 Liferay Digital Experience Platform 7.0 Liferay Liferay Portal

The Portal Security module in Liferay Portal 7.2.1 and previous versions, and Liferay DXP 7.0 before fix pack 90, 7.1 before fix pack 17 and 7.2 before fix pack 5 does not correctly import users from LDAP, which allows remote malicious users to prevent a legitimate user from auth...

Liferay Liferay Portal Liferay Digital Experience Platform 7.2 Liferay Digital Experience Platform 7.1 Liferay Digital Experience Platform 7.0

The Layout module in Liferay Portal 7.1.0 up to and including 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 6, exposes the CSRF token in URLs, which allows man-in-the-middle malicious users to obtain the token and conduct Cross-Site Request Forgery (CSRF)...

Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

The Dynamic Data Mapping module in Liferay Portal 7.1.0 up to and including 7.3.2, and Liferay DXP 7.1 before fix pack 19, and 7.2 before fix pack 7, autosaves form values for unauthenticated users, which allows remote malicious users to view the autosaved values by viewing the f...

Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

In Liferay Portal 7.3.0 and previous versions, and Liferay DXP 7.0 before fix pack 96, 7.1 before fix pack 18, and 7.2 before fix pack 5, password reset tokens are not invalidated after a user changes their password, which allows remote malicious users to change the user’s ...

Liferay Dxp 7.0 Liferay Dxp 7.1 Liferay Dxp 7.2 Liferay Liferay Portal

Privilege escalation vulnerability in Liferay Portal 7.0.3 up to and including 7.3.4, and Liferay DXP 7.1 before fix pack 20, and 7.2 before fix pack 9 allows remote authenticated users with permission to update/edit users to take over a company administrator user account by edit...

Liferay Dxp 7.2 Liferay Dxp 7.1 Liferay Liferay Portal

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook