Maven/com.liferay.portal:com.liferay.portal.impl CVE-2021-33321: high 7.5, EPSS 1.43%
Liferay Portal and Liferay DXP insecure default configuration
Action: Upgrade com.liferay.portal:com.liferay.portal.impl to 5.11.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.11.0 | - |
Fixed versions
| 5.11.0 |
Sources
- osv: GHSA-jfch-m2x3-2v66
- https://nvd.nist.gov/vuln/detail/CVE-2021-33321
- https://github.com/liferay/liferay-portal/commit/06df28c5ad618afed967fa485418e6cc29c70f38
- https://github.com/liferay/liferay-portal/commit/37de1d78d9b1c4a473e3233a6ea146c741075e18
- https://github.com/liferay/liferay-portal
- https://help.liferay.com/hc/en-us/articles/360050785632
- https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120748055
CVE-2021-33321 · published · modified · JSON