{"action":"Upgrade com.liferay.portal:release.dxp.bom to 7.3.10.fp1 or later.","affected":[{"fixed":"7.3.10.fp1","introduced":"0"}],"component":"com.liferay.portal:release.dxp.bom","cve_ids":["CVE-2021-29041"],"ecosystem":"Maven","epss":0.01124,"exploited":false,"fixed_versions":["7.3.10.fp1"],"ghsa_id":"GHSA-82j7-2h3j-hc7f","id":"tcs_01M5N8KJ9QEW79BNZHEJ80Y7WK","modified_at":"2025-05-14T08:27:07.862242Z","published_at":"2022-05-24T19:02:32Z","references":["https://osv.dev/vulnerability/GHSA-82j7-2h3j-hc7f","https://nvd.nist.gov/vuln/detail/CVE-2021-29041","https://github.com/liferay/liferay-portal","https://issues.liferay.com/browse/LPE-17131","http://liferay.com"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-82j7-2h3j-hc7f","url":"https://osv.dev/vulnerability/GHSA-82j7-2h3j-hc7f"}],"summary":"Liferay DXP Vulnerable to Denial-of-service (DoS) in the Multi-Factor Authentication Module"}