Maven/com.liferay.portal:release.portal.bom CVE-2021-33321: high 7.5, EPSS 1.43%
Liferay Portal and Liferay DXP insecure default configuration
Action: Upgrade com.liferay.portal:release.portal.bom to 7.3.3 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.3.3 | - |
Fixed versions
| 7.3.3 |
Sources
- osv: GHSA-jfch-m2x3-2v66#Maven/com.liferay.portal:release.portal.bom
- https://nvd.nist.gov/vuln/detail/CVE-2021-33321
- https://github.com/liferay/liferay-portal/commit/06df28c5ad618afed967fa485418e6cc29c70f38
- https://github.com/liferay/liferay-portal/commit/37de1d78d9b1c4a473e3233a6ea146c741075e18
- https://github.com/liferay/liferay-portal
- https://help.liferay.com/hc/en-us/articles/360050785632
- https://portal.liferay.dev/learn/security/known-vulnerabilities/-/asset_publisher/HbL5mxmVrnXW/content/id/120748055
CVE-2021-33321 · published · modified · JSON