{"action":"Upgrade com.liferay:com.liferay.document.library.web to 5.0.54 or later.","affected":[{"fixed":"5.0.54","introduced":"5.0.6"}],"component":"com.liferay:com.liferay.document.library.web","cve_ids":["CVE-2021-33337"],"ecosystem":"Maven","epss":0.00805,"exploited":false,"fixed_versions":["5.0.54"],"ghsa_id":"GHSA-v88g-7fx4-9q7f","id":"tcs_01M5N9DMY4R0QP4KJM1RHH4FRP","modified_at":"2025-07-14T18:59:35.977378Z","published_at":"2022-05-24T19:10:00Z","references":["https://osv.dev/vulnerability/GHSA-v88g-7fx4-9q7f","https://nvd.nist.gov/vuln/detail/CVE-2021-33337","https://github.com/liferay/liferay-portal/commit/432e9eb911d11ff40e1db652690586e496940633","https://github.com/liferay/liferay-portal","https://issues.liferay.com/browse/LPE-17101","https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2021-33337"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-v88g-7fx4-9q7f","url":"https://osv.dev/vulnerability/GHSA-v88g-7fx4-9q7f"}],"summary":"Liferay Portal and Liferay DXP Cross-site scripting (XSS) vulnerability in the Document Library module"}