Executive brief
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
Affected products
- Maven com.liferay.portal:com.liferay.portal.impl
- Maven com.liferay.portal:release.dxp.bom
Junglewise Threat Intelligence
CVE-2021-29050: Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
CVE-2021-29050 · Severity: low · CVSS 3.1 · Published 2024-02-21
Technologies: com.liferay.portal:com.liferay.portal.impl (Maven), com.liferay.portal:release.dxp.bom (Maven). Vendors: Maven.
Related threats
- Liferay Portal and DXP use an incorrect cache-control header
- Liferay Portal Stores Password Reset Tokens in Plain Text
- Liferay Portal ComboServlet denial of service via large file combination
- Liferay Portal reflected cross-site scripting (XSS) vulnerability in the google_gaget
- Liferay is Vulnerable to Authorization Bypass Through User-Controlled Key